fix: azure storage signing failed for query contains =

src/azure/constants.rs

@@ -1,3 +1,12 @@
+use percent_encoding::{AsciiSet, NON_ALPHANUMERIC};
+
 // Headers used in azure services.
 pub const X_MS_DATE: &str = "x-ms-date";
 pub const CONTENT_MD5: &str = "content-md5";
+
+pub static AZURE_QUERY_ENCODE_SET: AsciiSet = NON_ALPHANUMERIC
+    .remove(b'-')
+    .remove(b'.')
+    .remove(b'_')
+    .remove(b'/')
+    .remove(b'~');

src/azure/storage/signer.rs

@@ -8,6 +8,7 @@ use anyhow::anyhow;
 use anyhow::Result;
 use http::header::*;
 use log::debug;
+use percent_encoding::percent_encode;
 
 use super::super::constants::*;
 use super::credential::Credential;
@@ -142,7 +143,11 @@ impl Signer {
     /// }
     /// ```
     pub fn sign(&self, req: &mut impl SignableRequest, cred: &Credential) -> Result<()> {
-        let ctx = self.build(req, SigningMethod::Header, cred)?;
+        let mut ctx = self.build(req, SigningMethod::Header, cred)?;
+
+        for (_, v) in ctx.query.iter_mut() {
+            *v = percent_encode(v.as_bytes(), &AZURE_QUERY_ENCODE_SET).to_string();
+        }
         req.apply(ctx)
     }
 
@@ -243,11 +248,17 @@ fn canonicalize_resource(ctx: &mut SigningContext, ak: &str) -> String {
         return format!("/{}{}", ak, ctx.path);
     }
 
+    let query = ctx
+        .query
+        .iter()
+        .map(|(k, v)| (k.to_lowercase(), v.clone()))
+        .collect();
+
     format!(
         "/{}{}\n{}",
         ak,
         ctx.path,
-        SigningContext::query_to_string(ctx.query.clone(), ":", "\n")
+        SigningContext::query_to_percent_decoded_string(query, ":", "\n")
     )
 }