How to generate azure blob storage SAS url using java?

Following code worked for me.

BlobContainerSasPermission blobContainerSasPermission = new BlobContainerSasPermission()
                .setReadPermission(true)
                .setWritePermission(true)
                .setListPermission(true);
        BlobServiceSasSignatureValues builder = new BlobServiceSasSignatureValues(OffsetDateTime.now().plusDays(1), blobContainerSasPermission)
                .setProtocol(SasProtocol.HTTPS_ONLY);
        BlobClient client = new BlobClientBuilder()
                .connectionString("connection string")
                .blobName("")
                .buildClient();
        String blobContainerName = "test";
        return String.format("https://%s.blob.core.windows.net/%s?%s",client.getAccountName(), blobContainerName, client.generateSas(builder));

You can use azure storage SDK for maven as follows:

 <dependency>
    <groupId>com.microsoft.azure</groupId>
    <artifactId>azure-storage</artifactId>
    <version>8.3.0</version>
</dependency>

Then follow the below code to generate SAS token which you can append to your storage URL.

    CloudStorageAccount account = CloudStorageAccount.parse(blobConnectionString);
        
     // Create a blob service client
     CloudBlobClient blobClient = account.createCloudBlobClient();
                              
     CloudBlobContainer container = blobClient.getContainerReference(containerName);
    
     Date expirationTime = Date.from(LocalDateTime.now().plusDays(7).atZone(ZoneOffset.UTC).toInstant());
    SharedAccessBlobPolicy sharedAccessPolicy=new SharedAccessBlobPolicy();
    sharedAccessPolicy.setPermissions(EnumSet.of(SharedAccessBlobPermissions.READ, 
        SharedAccessBlobPermissions.WRITE,SharedAccessBlobPermissions.ADD));
    sharedAccessPolicy.setSharedAccessStartTime(new Date());
    sharedAccessPolicy.setSharedAccessExpiryTime(expirationTime);
        
    String sasToken = container.generateSharedAccessSignature(sharedAccessPolicy, null);

There's a REST API that you can call. See at https://docs.microsoft.com/en-us/rest/api/storageservices/create-service-sas.