Package version:

Interface SASQueryParametersOptions

Options to construct SASQueryParameters.

interface SASQueryParametersOptions {
    cacheControl?: string;
    contentDisposition?: string;
    contentEncoding?: string;
    contentLanguage?: string;
    contentType?: string;
    correlationId?: string;
    delegatedUserObjectId?: string;
    encryptionScope?: string;
    expiresOn?: any;
    identifier?: string;
    ipRange?: SasIPRange;
    permissions?: string;
    preauthorizedAgentObjectId?: string;
    protocol?: SASProtocol;
    resource?: string;
    resourceTypes?: string;
    services?: string;
    startsOn?: any;
    userDelegationKey?: any;
}

Properties

cacheControl?: string

Value for cache-control header in Blob/File Service SAS.

contentDisposition?: string

Value for content-disposition header in Blob/File Service SAS.

contentEncoding?: string

Value for content-encoding header in Blob/File Service SAS.

contentLanguage?: string

Value for content-length header in Blob/File Service SAS.

contentType?: string

Value for content-type header in Blob/File Service SAS.

correlationId?: string

A GUID value that will be logged in the storage diagnostic logs and can be used to correlate SAS generation with storage resource access. This is only used for User Delegation SAS.

delegatedUserObjectId?: string

Optional. Beginning in version 2025-07-05, this value specifies the Entra ID of the user would is authorized to use the resulting SAS URL. The resulting SAS URL must be used in conjunction with an Entra ID token that has been issued to the user specified in this value.

encryptionScope?: string

Optional. Encryption scope to use when sending requests authorized with this SAS URI.

expiresOn?: any

Optional only when identifier is provided. The expiry time for this SAS token.

identifier?: string

Optional. The signed identifier (only for BlobSASSignatureValues).

ipRange?: SasIPRange

Optional. IP ranges allowed in this SAS.

permissions?: string

Optional only when identifier is provided. Please refer to AccountSASPermissions, BlobSASPermissions, or ContainerSASPermissions for more details.

preauthorizedAgentObjectId?: string

Authorized AAD Object ID in GUID format. The AAD Object ID of a user authorized by the owner of the User Delegation Key to perform the action granted by the SAS. The Azure Storage service will ensure that the owner of the user delegation key has the required permissions before granting access but no additional permission check for the user specified in this value will be performed. This cannot be used in conjuction with signedUnauthorizedUserObjectId. This is only used for User Delegation SAS.

protocol?: SASProtocol

Optional. The allowed HTTP protocol(s).

resource?: string

Optional. Specifies which resources are accessible via the SAS (only for BlobSASSignatureValues).

resourceTypes?: string

Optional. The storage resource types being accessed (only for Account SAS). Please refer to AccountSASResourceTypes for more details.

services?: string

Optional. The storage services being accessed (only for Account SAS). Please refer to AccountSASServices for more details.

startsOn?: any

Optional. The start time for this SAS token.

userDelegationKey?: any

User delegation key properties.