Azure Log Analytics工作区请求禁止

Question

我正在尝试将日志从我的应用程序发送到 azure日志分析工作区，为了做到这一点，我根据我在 https://learn.microsoft.com/en-us/azure/azure/azure/azure-monitor/logs /data-collector-api

using maintenance.messaging;
using System;
using System.Collections.Generic;
using System.Security.Cryptography;
using System.Text;
using System.Threading.Tasks;
namespace maintenance.dataaccessobjects
{
    public class LogAnalyticsWorkspaceDAO
    {
        private static LogAnalyticsWorkspaceDAO _Instance { get; set; }
        private String WorkspaceId { get; set; } = AzureKeyVaultDAO.Instance.GetSecret("WorkspaceId"); //Get WorkspaceId from KeyVault
        private String SharedKey { get; set; } = AzureKeyVaultDAO.Instance.GetSecret("SharedKey"); //Get SharedKey from KeyVault
        private String ApiVersion { get; set; } = AzureKeyVaultDAO.Instance.GetSecret("LAWApiVersion"); //Get API Version from KeyVault 2016-04-01
        private String LogType { get; set; } = AzureKeyVaultDAO.Instance.GetSecret("LogType"); //Get LogType from KeyVault ApplicationLog
        private LogAnalyticsWorkspaceDAO()
        {
        }
        public static LogAnalyticsWorkspaceDAO Instance
        {
            get
            {
                if (_Instance == null)
                {
                    _Instance = new LogAnalyticsWorkspaceDAO();
                }
                return _Instance;
            }
        }
        private string GetSignature(String Method, Int32 ContentLength, String ContentType, DateTime Date, String Resource)
        {
            string Message = $"{Method}\n{ContentLength}\n{ContentType}\nx-ms-date:{Date}\n{Resource}";
            byte[] Bytes = Encoding.UTF8.GetBytes(Message);
            HMACSHA256 Encryptor = new HMACSHA256(Convert.FromBase64String(SharedKey));
            return $"SharedKey {WorkspaceId}:{Convert.ToBase64String(Encryptor.ComputeHash(Bytes))}";
        }
        public async Task<String> Post(String Message)
        {
            DateTime Date = DateTime.UtcNow;
            Dictionary<String, String> Headers = new Dictionary<String, String>();
            MessageSender MessageSender = new MessageSender(new Uri($"https://{WorkspaceId}.ods.opinsights.azure.com/api/logs?api-version={ApiVersion}"));
            Headers.Add("Method", "POST");
            Headers.Add("Log-Type", LogType);
            Headers.Add("x-ms-date", Date.ToString("r"));
            Headers.Add("Authorization", GetSignature("POST", Message.Length, "application/json", Date, "/api/logs"));
            return await MessageSender.Post(MessageSender.Message(Headers, Message));
        }
    }
}
using System;
using System.Collections.Generic;
using System.Net.Http;
using System.Text;
using System.Threading.Tasks;
namespace maintenance.messaging
{
    public class MessageSender : IDisposable
    {
        private readonly HttpClient Client;
        private Uri Url { get; set; }
        public MessageSender(Uri Url)
        {
            this.Client = new HttpClient();
            this.Url = Url;
        }
        public HttpRequestMessage Message(Dictionary<String, String> Headers, String Message)
        {
            HttpRequestMessage Request = new HttpRequestMessage(HttpMethod.Post, this.Url);
            Request.Content = new StringContent(Message, Encoding.UTF8, "application/json");
            foreach (KeyValuePair<String, String> Header in Headers)
            {
                Request.Headers.Add(Header.Key, Header.Value);
            }
            return Request;
        }
        public async Task<String> Post(HttpRequestMessage Request)
        {
            HttpResponseMessage Response = await Client.SendAsync(Request);
            Response.EnsureSuccessStatusCode();
            return await Response.Content.ReadAsStringAsync();
        }
        public void Dispose()
        {
            Client?.Dispose();
        }
    }
}

但是，我始终属于 403 Forbiden ，我想错误应该在授权中 header（签名生成）
你知道我缺少什么吗？我尝试寻找其他签名世代，但没有发现任何新的

我可能错了，但是据我所知，共享键不是base64编码，所以我只是尝试

HMACSHA256 Encryptor = new HMACSHA256(Encoding.UTF8.GetBytes(SharedKey));

，但是出现了相同的错误 403 forbidden forbidden forbidden

Answer 1

但是，我总是属于403 Forbiden，我想错误应该
在授权标题（签名生成）中，您知道什么
我失踪了吗？我尝试寻找其他签名世代，但是
找不到新的。

是的，您是正确的@delucaezequiel，此错误是由于 INVALIDATUTHORIZTION ， 造成的，请确保您添加了有效的工作空间ID和连接键的正确值。

有关用于在代码中配置的编码零件，请参阅此 SO Thread 如 @ greenrock 所建议。

有关更多信息，请参阅此 博客。