Question

我正在尝试通过Powershell访问DocumentDB并将c＃代码转换为powershell，但我不断收到远程服务器返回错误：（401）未经授权。

任何人都可以在我的代码中看到任何错误：

$Verb = 'get'

$resourceId = 'dbs/ToDoList'

$resourceType = 'dbs'

$Key = 'UVxrMX2hcmvc5bL6HTU3xZz9qt5KnCK587IDehOJjLki4xjPcTlAbyxZnyq12XqtynSZuyVJD8EDQhDrEIAYYg=='

$KeyType = 'master'

$tokenVersion = '1.0'



$UTCDate = $(Get-Date).ToUniversalTime().ToString('r',[System.Globalization.CultureInfo]::InvariantCulture)

$keyBytes = [System.Convert]::FromBase64String($Key)

$hmacSha256 = new-object -TypeName System.Security.Cryptography.HMACSHA256 -ArgumentList (,$keyBytes)

[string]$Payload = "{0}`n{1}`n{2}`n{3}`n{4}`n" -f $Verb.ToLowerInvariant(),$resourceType.ToLowerInvariant(),$resourceId.ToLowerInvariant(),$UTCDate.ToLowerInvariant(),''

$hashPayLoad = $hmacSha256.ComputeHash([Text.Encoding]::UTF8.GetBytes($PayLoad.ToLowerInvariant()))

$signature = [System.Convert]::ToBase64String($hashPayLoad)

[string]$authorizationFormat = 'type={0}&ver={1}&sig={2}' -f $keyType,$tokenVersion,$signature



$Token = [System.Web.HttpUtility]::UrlEncode($authorizationFormat)

$Date = $UTCDate



$header=@{

"authorization" = $Token

"x-ms-version" = "2015-12-16"

"x-ms-date" = $date

}



Invoke-RestMethod -Uri https://mycosmostest.documents.azure.com/dbs/ToDoList -Headers $header -Method get -ContentType "application/json"

错误：

Invoke-RestMethod : The remote server returned an error: (401) Unauthorized.

At C:\Users\axban\Documents\Scripts\Cosmostest.ps1:25 char:1

+ Invoke-RestMethod -Uri https://mycosmostest.documents.azure.com/dbs/T ...

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  + CategoryInfo          : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-RestMethod], WebException

    + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeRestMethodCommand

变量如下所示：

$UTCDate

Wed, 06 Sep 2017 06:18:56 GMT



$hmacSha256
Key                        : {81, 92, 107, 49...}

HashName                   : SHA256

HashSize                   : 256

Hash                       : {209, 150, 153, 51...}

InputBlockSize             : 1

OutputBlockSize            : 1

CanTransformMultipleBlocks : True

CanReuseTransform          : True



$Payload
get

dbs

dbs/todolist

wed, 06 sep 2017 06:18:56 gmt





$authorizationFormat
type=master&ver=1.0&sig=0ZaZM6KN54zH0PiEC8IwMqUeFnTODVSEJta+MvWG+aU=

$Token
type%3dmaster%26ver%3d1.0%26sig%3d0ZaZM6KN54zH0PiEC8IwMqUeFnTODVSEJta%2bMvWG%2baU%3d

Answer 1

今天进一步了解。我可以通过更改resourceID和URI来查询CosmosDB并获取数据库列表，如下所示：

$resourceId = ''

Invoke-RestMethod -Uri https://mycosmostest.documents.azure.com/dbs -Headers $header -Method get -ContentType "application/json"

我认为这意味着Access Token创建有效。

再多说一遍，我可以通过使用rid而不是id来检索文档：

    $ResourceId = 'UQJvAL+ePAA=' 
    $ResourceType = 'docs'
    $uri = 'https://axcosmostest.documents.azure.com/dbs/UQJvAA==/colls/UQJvAL+ePAA=/docs'

生成新日期和令牌后：

Invoke-RestMethod -Uri $uri -Headers $header -Method GET -ContentType "application/json"

它有效！

但是如何使用对象的更多人类ID进行查询？

Answer 2

想出来 - 大多数。随意测试结果：https://github.com/Agazoth/AxCosmosDB

查询部分仍然有问题。请随时为解决方案做出贡献。

通过PowerShell提供Azure Cosmos DocumentDB API

2 个答案: