---
title: "sign an HREF in the format of a URL and returns a SharedAccessSignatureSignedHrefResponse"
method: GET
path: "/sas/sign"
tags: ["Shared Access Signature (SAS) Tokens for GeoCatalog Asset Access"]
---

# sign an HREF in the format of a URL and returns a SharedAccessSignatureSignedHrefResponse

`GET /sas/sign`

Signs a HREF (a link URL) by appending a [SAS Token](https://docs.microsoft.com//azure/storage/common/storage-sas-overview#how-a-shared-access-signature-works).
If the HREF is not a Azure Blob Storage HREF, then pass back the HREF unsigned.

## Query parameters

- `api-version` string, required
- `href` string, uri, required
- `duration` integer

## Response `200`

Successful Response

- SharedAccessSignatureSignedLink — Represents a link that has not been signed with a SAS token. The expiry field will be null for unsigned links.
  - `msft:expiry` string, date-time — The expiry date of the signed link. This indicates when the link will no longer be valid.
  - `href` string, uri, required — The URL of the unsigned link.

## Other responses

- `default` — An unexpected error response.

---

[API](https://skmtc.net/azure/apis/orbital-microsoft-planetarycomputer.md) · [All operations](https://skmtc.net/azure/apis/orbital-microsoft-planetarycomputer/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/azure/orbital-microsoft-planetarycomputer/versions/42447be18bc5/schema)