ResourceToken support

Microsoft.Azure.Cosmos/src/CosmosClient.cs

@@ -168,7 +168,7 @@ public CosmosClient(
         /// performance guide at <see href="https://docs.microsoft.com/azure/cosmos-db/performance-tips"/>.
         /// </summary>
         /// <param name="accountEndpoint">The cosmos service endpoint to use</param>
-        /// <param name="accountKey">The cosmos account key to use to create the client.</param>
+        /// <param name="accountKey">The cosmos account key or resource token to use to create the client.</param>
         /// <param name="clientOptions">(Optional) client options</param>
         /// <example>
         /// The CosmosClient is created with the AccountEndpoint, AccountKey and configured to use "East US 2" region.
@@ -284,7 +284,7 @@ internal CosmosClient(
         public virtual Uri Endpoint { get; }
 
         /// <summary>
-        /// Gets the AuthKey used by the client from the Azure Cosmos DB service.
+        /// Gets the AuthKey or resource token used by the client from the Azure Cosmos DB service.
         /// </summary>
         /// <value>
         /// The AuthKey used by the client.

Microsoft.Azure.Cosmos/src/DocumentClient.cs

@@ -537,7 +537,7 @@ public DocumentClient(Uri serviceEndpoint,
         /// <seealso cref="ConsistencyLevel"/>
         public DocumentClient(
             Uri serviceEndpoint,
-            IList<Permission> permissionFeed,
+            IList<Documents.Permission> permissionFeed,
             ConnectionPolicy connectionPolicy = null,
             Documents.ConsistencyLevel? desiredConsistencyLevel = null)
             : this(serviceEndpoint,
@@ -547,7 +547,7 @@ public DocumentClient(
         {
         }
 
-        private static List<ResourceToken> GetResourceTokens(IList<Permission> permissionFeed)
+        private static List<ResourceToken> GetResourceTokens(IList<Documents.Permission> permissionFeed)
         {
             if (permissionFeed == null)
             {

Microsoft.Azure.Cosmos/src/Fluent/CosmosClientBuilder.cs

@@ -22,7 +22,7 @@ public class CosmosClientBuilder
         /// Initialize a new CosmosConfiguration class that holds all the properties the CosmosClient requires.
         /// </summary>
         /// <param name="accountEndpoint">The Uri to the Cosmos Account. Example: https://{Cosmos Account Name}.documents.azure.com:443/ </param>
-        /// <param name="accountKey">The key to the account.</param>
+        /// <param name="accountKey">The key to the account or resource token.</param>
         /// <example>
         /// The example below creates a new <see cref="CosmosClientBuilder"/>
         /// <code language="c#">

Microsoft.Azure.Cosmos/src/RequestOptions/PermissionRequestOptions.cs

@@ -0,0 +1,49 @@
+//------------------------------------------------------------
+// Copyright (c) Microsoft Corporation.  All rights reserved.
+//------------------------------------------------------------
+
+namespace Microsoft.Azure.Cosmos
+{
+    using Microsoft.Azure.Documents;
+
+    /// <summary>
+    /// The cosmos container request options
+    /// </summary>
+    public class PermissionRequestOptions : RequestOptions
+    {
+        /// <summary>
+        /// Gets or sets the expiry time for resource token. Used when creating/updating/reading permissions in the Azure Cosmos DB service.
+        /// </summary>
+        /// <value>
+        /// The expiry time in seconds for the resource token.
+        /// </value>
+        /// <remarks>
+        /// When working with Azure Cosmos DB Users and Permissions, the way to instantiate an instance of <see cref="Microsoft.Azure.Cosmos.CosmosClient"/> is to
+        /// get the <see cref="PermissionProperties.Token"/> for the resource the <see cref="User"/> wants to access and pass this
+        /// to the authKeyOrResourceToken parameter of <see cref="Microsoft.Azure.Cosmos.CosmosClient"/> constructor
+        /// <para>
+        /// When requesting this Token, a RequestOption for ResourceTokenExpirySeconds can be used to set the length of time to elapse before the token expires.
+        /// This value can range from 10 seconds, to 5 hours (or 18,000 seconds)
+        /// The default value for this, should none be supplied is 1 hour (or 3,600 seconds).
+        /// </para>
+        /// </remarks>
+        /// <seealso cref="Microsoft.Azure.Cosmos.CosmosClient"/>
+        /// <seealso cref="Microsoft.Azure.Cosmos.PermissionProperties"/>
+        /// <seealso cref="Microsoft.Azure.Cosmos.UserProperties"/>
+        public int? ResourceTokenExpirySeconds { get; set; }
+
+        /// <summary>
+        /// Fill the CosmosRequestMessage headers with the set properties
+        /// </summary>
+        /// <param name="request">The <see cref="RequestMessage"/></param>
+        internal override void PopulateRequestOptions(RequestMessage request)
+        {
+            if (this.ResourceTokenExpirySeconds != null)
+            {
+                request.Headers.Add(HttpConstants.HttpHeaders.ResourceTokenExpiry, this.ResourceTokenExpirySeconds.ToString());
+            }
+
+            base.PopulateRequestOptions(request);
+        }
+    }
+}

Microsoft.Azure.Cosmos/src/Resource/Container/Container.cs

@@ -175,7 +175,7 @@ public abstract Task<ResponseMessage> ReplaceContainerStreamAsync(
         /// <example>
         /// <code language="c#">
         /// <![CDATA[
-        /// Container container = this.database.Containers["containerId"];
+        /// Container container = this.database.GetContainer("containerId");
         /// ContainerResponse response = await container.DeleteContainerAsync();
         /// ]]>
         /// </code>

Microsoft.Azure.Cosmos/src/Resource/Container/ContainerCore.cs

@@ -6,7 +6,6 @@ namespace Microsoft.Azure.Cosmos
 {
     using System;
     using System.IO;
-    using System.Net;
     using System.Threading;
     using System.Threading.Tasks;
     using Microsoft.Azure.Cosmos.Routing;

Microsoft.Azure.Cosmos/src/Resource/CosmosResponseFactory.cs

@@ -76,6 +76,36 @@ internal Task<ContainerResponse> CreateContainerResponseAsync(
             });
         }
 
+        internal Task<UserResponse> CreateUserResponseAsync(
+            User user,
+            Task<ResponseMessage> cosmosResponseMessageTask)
+        {
+            return this.ProcessMessageAsync(cosmosResponseMessageTask, (cosmosResponseMessage) =>
+            {
+                UserProperties userProperties = this.ToObjectInternal<UserProperties>(cosmosResponseMessage, this.propertiesSerializer);
+                return new UserResponse(
+                    cosmosResponseMessage.StatusCode,
+                    cosmosResponseMessage.Headers,
+                    userProperties,
+                    user);
+            });
+        }
+
+        internal Task<PermissionResponse> CreatePermissionResponseAsync(
+            Permission user,
+            Task<ResponseMessage> cosmosResponseMessageTask)
+        {
+            return this.ProcessMessageAsync(cosmosResponseMessageTask, (cosmosResponseMessage) =>
+            {
+                PermissionProperties permissionProperties = this.ToObjectInternal<PermissionProperties>(cosmosResponseMessage, this.propertiesSerializer);
+                return new PermissionResponse(
+                    cosmosResponseMessage.StatusCode,
+                    cosmosResponseMessage.Headers,
+                    permissionProperties,
+                    user);
+            });
+        }
+
         internal Task<DatabaseResponse> CreateDatabaseResponseAsync(
             Database database,
             Task<ResponseMessage> cosmosResponseMessageTask)