[Tables] Add sas token live tests (#30614)

Author: Yalin Li

Diff for: sdk/tables/azure-data-tables/CHANGELOG.md

@@ -3,12 +3,14 @@
 ## 12.4.4 (Unreleased)
 
 ### Features Added
+* Enabled to specify resource type `container` in account SAS access.
 
 ### Breaking Changes
 
 ### Bugs Fixed
 
 ### Other Changes
+* Fixed a bug when creating `TableClient` from url with sas token in `azure-core`, so we bumped minimum dependency on `azure-core` to `>=1.27.1`. ([#28918](https://github.com/Azure/azure-sdk-for-python/issues/28918))
 
 ## 12.4.3 (2023-06-13)
 

Diff for: sdk/tables/azure-data-tables/assets.json

@@ -2,5 +2,5 @@
   "AssetsRepo": "Azure/azure-sdk-assets",
   "AssetsRepoPrefixPath": "python",
   "TagPrefix": "python/tables/azure-data-tables",
-  "Tag": "python/tables/azure-data-tables_a91b7254c8"
+  "Tag": "python/tables/azure-data-tables_e1a287b0d2"
 }

Diff for: sdk/tables/azure-data-tables/azure/data/tables/_models.py

@@ -536,12 +536,15 @@ class ResourceTypes(object):
         Get Service Stats, List Tables)
     :keyword bool object:
         Access to object-level APIs for tables (e.g. Get/Create/Query Entity etc.)
+    :keyword bool container:
+        Access to container-level APIs for tables (e.g. Create Tables etc.)
     """
 
     def __init__(self, **kwargs) -> None:
         self.service = kwargs.get('service', False)
         self.object = kwargs.get('object', False)
-        self._str = ("s" if self.service else "") + ("o" if self.object else "")
+        self.container = kwargs.get('container', False)
+        self._str = ("s" if self.service else "") + ("o" if self.object else "") + ("c" if self.container else "")
 
     def __str__(self):
         return self._str
@@ -561,8 +564,9 @@ def from_string(cls, string: str) -> 'ResourceTypes':
         """
         res_service = "s" in string
         res_object = "o" in string
+        res_container = "c" in string
 
-        parsed = cls(service=res_service, object=res_object)
+        parsed = cls(service=res_service, object=res_object, container=res_container)
         parsed._str = string  # pylint: disable = protected-access
         return parsed
 

Diff for: sdk/tables/azure-data-tables/setup.py

@@ -65,7 +65,7 @@
     ]),
     python_requires=">=3.7",
     install_requires=[
-        "azure-core<2.0.0,>=1.24.0",
+        "azure-core<2.0.0,>=1.27.1",
         "yarl<2.0,>=1.0",
         "isodate<1.0.0,>=0.6.1",
         "typing-extensions>=4.3.0"

Diff for: sdk/tables/azure-data-tables/tests/test_table_client.py

@@ -7,12 +7,13 @@
 import platform
 import os
 
+from datetime import datetime, timedelta
 from devtools_testutils import AzureRecordedTestCase, recorded_by_proxy
 
-from azure.data.tables._error import _validate_storage_tablename
-from azure.data.tables import TableServiceClient, TableClient
+from azure.data.tables import TableServiceClient, TableClient, AccountSasPermissions, ResourceTypes, generate_account_sas
 from azure.data.tables import __version__ as VERSION
 from azure.data.tables._constants import DEFAULT_STORAGE_ENDPOINT_SUFFIX
+from azure.data.tables._error import _validate_storage_tablename
 from azure.core.credentials import AzureNamedKeyCredential, AzureSasCredential
 from azure.core.exceptions import ResourceNotFoundError, HttpResponseError, ClientAuthenticationError
 from azure.identity import DefaultAzureCredential
@@ -188,6 +189,51 @@ def test_error_handling(self, tables_storage_account_name, tables_primary_storag
         ) as service_client:
             with pytest.raises(ClientAuthenticationError):
                 service_client.create_table_if_not_exists(table_name="TestInsert")
+    
+    @tables_decorator
+    @recorded_by_proxy
+    def test_client_with_sas_token(self, tables_storage_account_name, tables_primary_storage_account_key):
+        base_url = self.account_url(tables_storage_account_name, "table")
+        table_name = self.get_resource_name("mytable")
+        sas_token = self.generate_sas(
+            generate_account_sas,
+            tables_primary_storage_account_key,
+            resource_types=ResourceTypes.from_string("sco"),
+            permission=AccountSasPermissions.from_string("rwdlacu"),
+            expiry=datetime.utcnow() + timedelta(hours=1),
+        )
+        
+        with TableServiceClient(base_url, credential=AzureSasCredential(sas_token)) as client:
+            client.create_table(table_name)
+            name_filter = "TableName eq '{}'".format(table_name)
+            result = client.query_tables(name_filter)
+            assert len(list(result)) == 1
+        
+        with TableClient(base_url, table_name, credential=AzureSasCredential(sas_token)) as client:
+            entities = client.query_entities(
+                query_filter='PartitionKey eq @pk',
+                parameters={'pk': 'dummy-pk'},
+            )
+            for e in entities:
+                pass
+        
+        with TableClient.from_table_url(f"{base_url}/{table_name}", credential=AzureSasCredential(sas_token)) as client:
+            entities = client.query_entities(
+                query_filter='PartitionKey eq @pk',
+                parameters={'pk': 'dummy-pk'},
+            )
+            for e in entities:
+                pass
+        
+        sas_url = f"{base_url}/{table_name}?{sas_token}"
+        with TableClient.from_table_url(sas_url) as client:
+            entities = client.query_entities(
+                query_filter='PartitionKey eq @pk',
+                parameters={'pk': 'dummy-pk'},
+            )
+            for e in entities:
+                pass
+            client.delete_table()
 
 
 # --Helpers-----------------------------------------------------------------

Diff for: sdk/tables/azure-data-tables/tests/test_table_client_async.py

@@ -3,17 +3,18 @@
 # Licensed under the MIT License. See License.txt in the project root for
 # license information.
 # --------------------------------------------------------------------------
-from azure.core.credentials import AzureNamedKeyCredential
 import pytest
 import platform
 import os
 
+from datetime import datetime, timedelta
 from devtools_testutils import AzureRecordedTestCase
 from devtools_testutils.aio import recorded_by_proxy_async
 
 from azure.core.credentials import AzureNamedKeyCredential, AzureSasCredential
 from azure.core.exceptions import ResourceNotFoundError, HttpResponseError, ClientAuthenticationError
 from azure.identity.aio import DefaultAzureCredential
+from azure.data.tables import AccountSasPermissions, ResourceTypes, generate_account_sas
 from azure.data.tables.aio import TableServiceClient, TableClient
 from azure.data.tables._version import VERSION
 from azure.data.tables._constants import DEFAULT_STORAGE_ENDPOINT_SUFFIX
@@ -189,6 +190,54 @@ async def test_error_handling(self, tables_storage_account_name, tables_primary_
         ) as service_client:
             with pytest.raises(ClientAuthenticationError):
                 await service_client.create_table_if_not_exists(table_name="TestInsert")
+    
+    @tables_decorator_async
+    @recorded_by_proxy_async
+    async def test_client_with_sas_token(self, tables_storage_account_name, tables_primary_storage_account_key):
+        base_url = self.account_url(tables_storage_account_name, "table")
+        table_name = self.get_resource_name("mytable")
+        sas_token = self.generate_sas(
+            generate_account_sas,
+            tables_primary_storage_account_key,
+            resource_types=ResourceTypes.from_string("sco"),
+            permission=AccountSasPermissions.from_string("rwdlacu"),
+            expiry=datetime.utcnow() + timedelta(hours=1),
+        )
+        
+        async with TableServiceClient(base_url, credential=AzureSasCredential(sas_token)) as client:
+            await client.create_table(table_name)
+            name_filter = "TableName eq '{}'".format(table_name)
+            count = 0
+            result = client.query_tables(name_filter)
+            async for table in result:
+                count += 1
+            assert count == 1
+        
+        async with TableClient(base_url, table_name, credential=AzureSasCredential(sas_token)) as client:
+            entities = client.query_entities(
+                query_filter='PartitionKey eq @pk',
+                parameters={'pk': 'dummy-pk'},
+            )
+            async for e in entities:
+                pass
+        
+        async with TableClient.from_table_url(f"{base_url}/{table_name}", credential=AzureSasCredential(sas_token)) as client:
+            entities = client.query_entities(
+                query_filter='PartitionKey eq @pk',
+                parameters={'pk': 'dummy-pk'},
+            )
+            async for e in entities:
+                pass
+        
+        sas_url = f"{base_url}/{table_name}?{sas_token}"
+        async with TableClient.from_table_url(sas_url) as client:
+            entities = client.query_entities(
+                query_filter='PartitionKey eq @pk',
+                parameters={'pk': 'dummy-pk'},
+            )
+            async for e in entities:
+                pass
+            await client.delete_table()
 
 
 class TestTableClientAsyncUnitTests(AsyncTableTestCase):