Describe the bug
After introducing #20520 SAS query params are sanitized but it seems like the SAS_EXPIRY_TIME gets modified and it invalidates the provided signature.
Exception or Stack Trace
<?xml version="1.0" encoding="utf-8"?><Error><Code>AuthenticationFailed</Code><Message>Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.
RequestId:76972c6c-201e-0090-1453-582f4d000000
Time:2021-06-03T08:38:25.4063780Z</Message><AuthenticationErrorDetail>Signature did not match. String to sign used was rwdl
2021-07-20T13:21:00Z
/blob/<account>/<container>
2018-11-09
c
To Reproduce
Provide a SAS token with SAS_EXPIRY_TIME without seconds, i.e. se=2021-07-20T13%3A21Z&sp=rwdl&sv=2018-11-09&sr=c&sig=<redacted> that converts the http request query params into se=2021-07-20T13%3A21%3A00Z&sp=rwdl&sv=2018-11-09&sr=c&sig=<redacted> making the signature invalid. This can be reproduced with curl easily.
Expected behavior
Generate a valid http request
Setup (please complete the following information):
- Version of the Library used:
12.11.1
Additional context
Add any other context about the problem here.
Information Checklist
Kindly make sure that you have added all the following information above and checkoff the required fields otherwise we will treat the issuer as an incomplete report
Describe the bug
After introducing #20520 SAS query params are sanitized but it seems like the
SAS_EXPIRY_TIMEgets modified and it invalidates the provided signature.Exception or Stack Trace
To Reproduce
Provide a SAS token with
SAS_EXPIRY_TIMEwithout seconds, i.e.se=2021-07-20T13%3A21Z&sp=rwdl&sv=2018-11-09&sr=c&sig=<redacted>that converts the http request query params intose=2021-07-20T13%3A21%3A00Z&sp=rwdl&sv=2018-11-09&sr=c&sig=<redacted>making the signature invalid. This can be reproduced with curl easily.Expected behavior
Generate a valid http request
Setup (please complete the following information):
12.11.1Additional context
Add any other context about the problem here.
Information Checklist
Kindly make sure that you have added all the following information above and checkoff the required fields otherwise we will treat the issuer as an incomplete report