[Storage] Fix Copy blob with Oauth failure (#14662) (#14667)

Author: blueww

src/Storage/Storage.Management/ChangeLog.md

@@ -18,6 +18,8 @@
         - Additional information about change #1
 -->
 ## Upcoming Release
+* Fixed copy blob fail with source context as Oauth [#14662]
+    -  `Start-AzStorageBlobCopy`
 
 ## Version 3.5.0
 * Fixed an issue that list account from resource group won't use nextlink

src/Storage/Storage/Common/StorageExtensions.cs

@@ -197,7 +197,7 @@ internal static Uri GenerateUriWithCredentials(
         private static string GetBlobSasToken(CloudBlob blob)
         {
             if (null == blob.ServiceClient.Credentials
-                || blob.ServiceClient.Credentials.IsAnonymous)
+                || (blob.ServiceClient.Credentials.IsAnonymous && !blob.ServiceClient.Credentials.IsToken))
             {
                 return string.Empty;
             }
@@ -225,8 +225,18 @@ private static string GetBlobSasToken(CloudBlob blob)
             {
                 rootBlob = Util.GetBlobReference(blob.Uri, blob.ServiceClient.Credentials, blob.BlobType);
             }
+            if (!blob.ServiceClient.Credentials.IsToken) // not oauth, generated normal sas
+            {
+                return rootBlob.GetSharedAccessSignature(policy);
+            }
+            else // oauth, generate identity sas
+            {
+                DateTimeOffset userDelegationKeyStartTime = DateTime.Now;
+                DateTimeOffset userDelegationKeyEndTime = userDelegationKeyStartTime.AddMinutes(CopySASLifeTimeInMinutes) ;
+                Azure.Storage.UserDelegationKey userDelegationKey = rootBlob.ServiceClient.GetUserDelegationKey(userDelegationKeyStartTime, userDelegationKeyEndTime);
 
-            return rootBlob.GetSharedAccessSignature(policy);
+                return rootBlob.GetUserDelegationSharedAccessSignature(userDelegationKey, policy);
+            }
         }
 
         private static string GetBlobSasToken(BlobBaseClient blob, AzureStorageContext context)