Storage - STG101 Beta Features (#48019)

* adding new service version (#47408)

* STG 101 - Dynamic User Delegation SAS (#47479)

* wip implementation

* add base tests for SasImplUtilsTests

* add base tests for SasImplUtilsTests

* revert changes to stringToSign from changes made based on api

* remove static from SasImplUtilsTests so that beforeeach works

* add documentation for srq and srh

* finish sasClientTests

* uncomment stream of args from blobSasImplUtilStringToSignUserDelegationKeySupplier

* fix linting issue

* combine test for srh and srq into blobSasImplUtilStringToSignUserDelegationKey

* add recordings for blobSasImplUtilStringToSignUserDelegationKey

* add additional srh test to check for trailing newline

* add tests for srq

* add tests for srq and srh to datalake

* fix failing datalake sas tests

* add recordings for blobSasImplUtilStringToSignUserDelegationKey

* refactor SasTests to make the suppliers easier to read and write

* making new values in commonsasqueryparameters final

* adding note to new sas query param javadocs that they're only for UD sas

* adding note to datalake sas params too

* add header to sasimplutiltests

* applying spotless

* small refactors in new sas test models

* adding extra comments to SasClientTests

* applying new sas test model to blob sas tests

* returning null instead of empty string during formatting

* applying new sas test model to blob sas tests

* getting suppliers to use new models

* removing debugging method

* updating assets and fixing spelling

* removing unused import

* bruh

* datalake tests

* spotless

* style and assets

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* making new query param values deterministic

---------

Co-authored-by: browndav <browndav@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* adding uds changelog feature entires

* STG 101 - Deprecating BlobErrorCode Typo and Adding Correct Code (#47409)

* applying swagger changes and adding deprecation customization

* deleting old generated file

* adding changelog entry

* STG101 - Add Support for Missing SKU Names (#47437)

* applying swagger changes, untested

* removing random newline in swagger readme

* commiting temp test for history purposes

* removing temp test

* removing newline

* adding changelog entry

* adding sku names to cspell overrides

* STG101 - Delete Blob Conditional Tier (#47438)

* applying swagger and public facing changes, not tested

* adding changelog entry

* adding tests

* STG101 - Server-Side Encryption with Rekeying (#47439)

* applying swagger and adding value to options bags

* removing redundant module requirement

* style

* adding tests

* adding feature to changelog

* re-run ci

* adding recordings

* updating test assets

* STG 101 - Files Provisioned V2 Guardrails (#47464)

* generating off swagger

* adding changelog entry

* Update sdk/storage/azure-storage-file-share/CHANGELOG.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* STG101 - Cross-Tenant Support for Principal Bound Delegation Sas  (#47461)

* generating off swaggers and blob impl

* datalake implementation

* share implementation

* queue implementation

* changing tid to tenantId

* removing unused import

* updating blobsasimplutilstringtosign test supplier

* wip

* wip

* fixing blob readme

* adjusting blob tests

* adding blob async tests

* datalake tests

* file and queue tests

* cleanup

* small positional change

* Update sdk/storage/azure-storage-file-share/src/test/java/com/azure/storage/file/share/FileSasClientTests.java

subscribing to mono once instead of twice

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* fixing test failure

* changing test min service version to 2025.07.05

* addressing copilot comments

* fixing autorest version i messed up

* fixing revapi error

* updating assets

* updating datalake service client async methods to stop breaking existing test

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* updating swagger links to be 101 pr into main spec

* adding missing cross tenant principal bound delegation sas feature changelog entries

* updating blob swagger readme

* addressing copilot comments

* updating assets

* spotless

* fixing test names

---------

Co-authored-by: browndav <browndav@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: 3 people

.vscode/cspell.json

@@ -987,6 +987,7 @@
         "clientime",
         "ctxt",
         "etags",
+        "GZRS",
         "HTBB",
         "IPMISMATCH",
         "myaccountname",
@@ -1003,6 +1004,7 @@
         "myjavacontainerbuffereduploadlength",
         "myjavacontainerparallelupload",
         "RAGRS",
+        "RAGZRS",
         "saoid"
       ]
     },

sdk/storage/azure-storage-blob/CHANGELOG.md

@@ -3,6 +3,13 @@
 ## 12.34.0-beta.1 (Unreleased)
 
 ### Features Added
+- Added support for specifying a source customer-provided encryption key when using `AppendBlobClient.appendBlockFromUrl()`,
+`BlockBlobClient.stageBlockFromUrl()`, `BlockBlobClient.uploadFromUrl()`, and `PageBlobClient.uploadPagesFromUrl()` APIs. 
+- Added support for `AccessTierIfModifiedSince` and `AccessTierIfUnmodifiedSince` to conditionally perform `BlobClient.delete` operations.
+- Added support for missing SKU names `STANDARD_GZRS`, `STANDARD_RAGZRS` and `PREMIUM_ZRS` when using `getAccountInfo()` API.
+- Added support for error code `INCREMENTAL_COPY_OF_EARLIER_SNAPSHOT_NOT_ALLOWED`. This replaces `INCREMENTAL_COPY_OF_EARLIER_VERSION_SNAPSHOT_NOT_ALLOWED` which has been deprecated.
+- Added support for Dynamic User Delegation SAS.
+- Added cross-tenant support for principal bound delegation SAS.
 
 ### Breaking Changes
 

sdk/storage/azure-storage-blob/assets.json

@@ -2,5 +2,5 @@
   "AssetsRepo": "Azure/azure-sdk-assets",
   "AssetsRepoPrefixPath": "java",
   "TagPrefix": "java/storage/azure-storage-blob",
-  "Tag": "java/storage/azure-storage-blob_8c8c6e5dfd"
+  "Tag": "java/storage/azure-storage-blob_4ab10936db"
 }

sdk/storage/azure-storage-blob/src/main/java/com/azure/storage/blob/BlobServiceAsyncClient.java

@@ -37,6 +37,7 @@
 import com.azure.storage.blob.models.TaggedBlobItem;
 import com.azure.storage.blob.models.UserDelegationKey;
 import com.azure.storage.blob.options.BlobContainerCreateOptions;
+import com.azure.storage.blob.options.BlobGetUserDelegationKeyOptions;
 import com.azure.storage.blob.options.FindBlobsOptions;
 import com.azure.storage.blob.options.UndeleteBlobContainerOptions;
 import com.azure.storage.common.StorageSharedKeyCredential;
@@ -873,7 +874,7 @@ public Mono<UserDelegationKey> getUserDelegationKey(OffsetDateTime start, Offset
      *
      * @param start Start time for the key's validity. Null indicates immediate start.
      * @param expiry Expiration of the key's validity.
-     * @return A {@link Mono} containing a {@link Response} whose {@link Response#getValue() value} containing the user
+     * @return A {@link Mono} containing a {@link Response} whose {@link Response#getValue() value} contains the user
      * delegation key.
      * @throws IllegalArgumentException If {@code start} isn't null and is after {@code expiry}.
      * @throws NullPointerException If {@code expiry} is null.
@@ -888,20 +889,44 @@ public Mono<Response<UserDelegationKey>> getUserDelegationKeyWithResponse(Offset
         }
     }
 
+    /**
+     * Gets a user delegation key for use with this account's blob storage. Note: This method call is only valid when
+     * using {@link TokenCredential} in this object's {@link HttpPipeline}.
+     *
+     * @param options The {@link BlobGetUserDelegationKeyOptions options} to configure the request.
+     * @return A {@link Mono} containing a {@link Response} whose {@link Response#getValue() value} contains the user
+     * delegation key.
+     */
+    @ServiceMethod(returns = ReturnType.SINGLE)
+    public Mono<Response<UserDelegationKey>> getUserDelegationKeyWithResponse(BlobGetUserDelegationKeyOptions options) {
+        try {
+            StorageImplUtils.assertNotNull("options", options);
+            return withContext(context -> getUserDelegationKeyWithResponse(options.getStartsOn(),
+                options.getExpiresOn(), options.getDelegatedUserTenantId(), context));
+        } catch (RuntimeException ex) {
+            return monoError(LOGGER, ex);
+        }
+    }
+
     Mono<Response<UserDelegationKey>> getUserDelegationKeyWithResponse(OffsetDateTime start, OffsetDateTime expiry,
         Context context) {
-        StorageImplUtils.assertNotNull("expiry", expiry);
+        return getUserDelegationKeyWithResponse(start, expiry, null, context);
+    }
+
+    Mono<Response<UserDelegationKey>> getUserDelegationKeyWithResponse(OffsetDateTime start, OffsetDateTime expiry,
+        String delegatedUserTenantId, Context context) {
+        context = context == null ? Context.NONE : context;
+        throwOnAnonymousAccess();
         if (start != null && !start.isBefore(expiry)) {
             throw LOGGER.logExceptionAsError(
                 new IllegalArgumentException("`start` must be null or a datetime before `expiry`."));
         }
-        throwOnAnonymousAccess();
-        context = context == null ? Context.NONE : context;
 
         return this.azureBlobStorage.getServices()
             .getUserDelegationKeyWithResponseAsync(
                 new KeyInfo().setStart(start == null ? "" : Constants.ISO_8601_UTC_DATE_FORMATTER.format(start))
-                    .setExpiry(Constants.ISO_8601_UTC_DATE_FORMATTER.format(expiry)),
+                    .setExpiry(Constants.ISO_8601_UTC_DATE_FORMATTER.format(expiry))
+                    .setDelegatedUserTenantId(delegatedUserTenantId),
                 null, null, context)
             .map(rb -> new SimpleResponse<>(rb, rb.getValue()));
     }

sdk/storage/azure-storage-blob/src/main/java/com/azure/storage/blob/BlobServiceClient.java

@@ -44,6 +44,7 @@
 import com.azure.storage.blob.models.TaggedBlobItem;
 import com.azure.storage.blob.models.UserDelegationKey;
 import com.azure.storage.blob.options.BlobContainerCreateOptions;
+import com.azure.storage.blob.options.BlobGetUserDelegationKeyOptions;
 import com.azure.storage.blob.options.FindBlobsOptions;
 import com.azure.storage.blob.options.UndeleteBlobContainerOptions;
 import com.azure.storage.common.StorageSharedKeyCredential;
@@ -761,7 +762,8 @@ public Response<Void> setPropertiesWithResponse(BlobServiceProperties properties
      */
     @ServiceMethod(returns = ReturnType.SINGLE)
     public UserDelegationKey getUserDelegationKey(OffsetDateTime start, OffsetDateTime expiry) {
-        return getUserDelegationKeyWithResponse(start, expiry, null, Context.NONE).getValue();
+        return getUserDelegationKeyWithResponse(new BlobGetUserDelegationKeyOptions(expiry).setStartsOn(start), null,
+            Context.NONE).getValue();
     }
 
     /**
@@ -786,19 +788,39 @@ public UserDelegationKey getUserDelegationKey(OffsetDateTime start, OffsetDateTi
     @ServiceMethod(returns = ReturnType.SINGLE)
     public Response<UserDelegationKey> getUserDelegationKeyWithResponse(OffsetDateTime start, OffsetDateTime expiry,
         Duration timeout, Context context) {
-        StorageImplUtils.assertNotNull("expiry", expiry);
-        if (start != null && !start.isBefore(expiry)) {
+        return getUserDelegationKeyWithResponse(new BlobGetUserDelegationKeyOptions(expiry).setStartsOn(start), timeout,
+            context);
+    }
+
+    /**
+     * Gets a user delegation key for use with this account's blob storage. Note: This method call is only valid when
+     * using {@link TokenCredential} in this object's {@link HttpPipeline}.
+     *
+     * @param options The {@link BlobGetUserDelegationKeyOptions options} to configure the request.
+     * @param timeout An optional timeout value beyond which a {@link RuntimeException} will be raised.
+     * @param context Additional context that is passed through the Http pipeline during the service call.
+     * @return A {@link Response} whose {@link Response#getValue() value} contains the user delegation key.
+     */
+    @ServiceMethod(returns = ReturnType.SINGLE)
+    public Response<UserDelegationKey> getUserDelegationKeyWithResponse(BlobGetUserDelegationKeyOptions options,
+        Duration timeout, Context context) {
+        Context finalContext = context == null ? Context.NONE : context;
+        StorageImplUtils.assertNotNull("options", options);
+        throwOnAnonymousAccess();
+        if (options.getStartsOn() != null && !options.getStartsOn().isBefore(options.getExpiresOn())) {
             throw LOGGER.logExceptionAsError(
                 new IllegalArgumentException("`start` must be null or a datetime before `expiry`."));
         }
-        throwOnAnonymousAccess();
-        Context finalContext = context == null ? Context.NONE : context;
+
         Callable<ResponseBase<ServicesGetUserDelegationKeyHeaders, UserDelegationKey>> operation
             = () -> this.azureBlobStorage.getServices()
-                .getUserDelegationKeyWithResponse(
-                    new KeyInfo().setStart(start == null ? "" : Constants.ISO_8601_UTC_DATE_FORMATTER.format(start))
-                        .setExpiry(Constants.ISO_8601_UTC_DATE_FORMATTER.format(expiry)),
-                    null, null, finalContext);
+                .getUserDelegationKeyWithResponse(new KeyInfo()
+                    .setStart(options.getStartsOn() == null
+                        ? ""
+                        : Constants.ISO_8601_UTC_DATE_FORMATTER.format(options.getStartsOn()))
+                    .setExpiry(Constants.ISO_8601_UTC_DATE_FORMATTER.format(options.getExpiresOn()))
+                    .setDelegatedUserTenantId(options.getDelegatedUserTenantId()), null, null, finalContext);
+
         ResponseBase<ServicesGetUserDelegationKeyHeaders, UserDelegationKey> response
             = sendRequest(operation, timeout, BlobStorageException.class);
         return new SimpleResponse<>(response, response.getValue());

sdk/storage/azure-storage-blob/src/main/java/com/azure/storage/blob/BlobServiceVersion.java

@@ -152,7 +152,12 @@ public enum BlobServiceVersion implements ServiceVersion {
     /**
      * Service version {@code 2026-02-06}.
      */
-    V2026_02_06("2026-02-06");
+    V2026_02_06("2026-02-06"),
+
+    /**
+     * Service version {@code 2026-04-06}.
+     */
+    V2026_04_06("2026-04-06");
 
     private final String version;
 
@@ -174,6 +179,6 @@ public String getVersion() {
      * @return the latest {@link BlobServiceVersion}
      */
     public static BlobServiceVersion getLatest() {
-        return V2026_02_06;
+        return V2026_04_06;
     }
 }