New auth errors in Azure BLOB with Rclone 1.70+

Suspected Bug
1

What is the problem you are having with rclone?

Rclone 1.70.0+ new authentication errors with Azure BLOB Storage, including v1.70.3

Rolling back to v1.69.3 runs successfully.

Run the command 'rclone version' and share the full output of the command.

rclone v1.70.3
- os/version: ubuntu 22.04 (64 bit)
- os/kernel: 6.8.0-1029-azure (x86_64)
- os/type: linux
- os/arch: amd64
- go/version: go1.24.4
- go/linking: static
- go/tags: none

Are you on the latest version of rclone?

Yes.

Which cloud storage system are you using? (eg Google Drive)

Azure BLOB Storage

The command you were trying to run (eg rclone copy /tmp remote:tmp)

rclone sync --retries=1 -P sourceaccount:containername targetaccount:containername --exclude='_*'

The rclone config contents with secrets removed.

Storage account names replaced with generic names:

[sourceaccount]
type = azureblob
account = sourceaccount
key= ***

[targetaccount]
type = azureblob
account = targetaccount
key= ***

A log from the command with the -vv flag

2025/07/17 21:49:37 ERROR : request_01K0D524SMR0YV1XBYJ5FGA57V.json: Failed to copy: single part copy: copy blob: PUT https://sourceaccount.blob.core.windows.net/containername/request_01K0D524SMR0YV1XBYJ5FGA57V.json
--------------------------------------------------------------------------------
RESPONSE 403: 403 This request is not authorized to perform this operation.
ERROR CODE: CannotVerifyCopySource
--------------------------------------------------------------------------------
<?xml version="1.0" encoding="utf-8"?><Error><Code>CannotVerifyCopySource</Code><Message>This request is not authorized to perform this operation.
RequestId:********-****-****-****-************
Time:2025-07-17T21:49:37.6543453Z</Message><CopySourceStatusCode>403</CopySourceStatusCode><CopySourceErrorCode>AuthorizationFailure</CopySourceErrorCode><CopySourceErrorMessage>This request is not authorized to perform this operation.</CopySourceErrorMessage></Error>
2

welcome to the forum,

can you copy just one small file and post the full output.

something like this command:

rclone copy sourceaccount:containername/somefile.ext targetaccount:containername  --dump=headers -vv --retries=1
3

Error log with v1.70.3:

2025/07/17 22:13:09 DEBUG : rclone: Version "v1.70.3" starting with parameters ["rclone" "copy" "--retries=1" "--dump=headers" "--log-file=rclone.log" "sourceaccount:test" "targetaccount:test"]
2025/07/17 22:13:09 DEBUG : Creating backend with remote "sourceaccount:test"
2025/07/17 22:13:09 DEBUG : Using config file from "/home/kmatt/.config/rclone/rclone.conf"
2025/07/17 22:13:09 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/07/17 22:13:09 DEBUG : Creating backend with remote "targetaccount:test"
2025/07/17 22:13:09 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:13:09 DEBUG : HTTP REQUEST (req 0xc000434640)
2025/07/17 22:13:09 DEBUG : GET /test?comp=list&delimiter=%2F&include=metadata&maxresults=5000&prefix=&restype=container HTTP/1.1
Host: targetaccount.blob.core.windows.net
User-Agent: rclone/v1.70.3
Accept: application/xml
Authorization: XXXX
X-Ms-Date: Thu, 17 Jul 2025 22:13:09 GMT
x-ms-version: 2025-05-05
Accept-Encoding: gzip

2025/07/17 22:13:09 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:13:09 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:13:09 DEBUG : HTTP REQUEST (req 0xc0004a6140)
2025/07/17 22:13:09 DEBUG : GET /test?comp=list&delimiter=%2F&include=metadata&maxresults=5000&prefix=&restype=container HTTP/1.1
Host: sourceaccount.blob.core.windows.net
User-Agent: rclone/v1.70.3
Accept: application/xml
Authorization: XXXX
X-Ms-Date: Thu, 17 Jul 2025 22:13:09 GMT
x-ms-version: 2025-05-05
Accept-Encoding: gzip

2025/07/17 22:13:09 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:13:09 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:13:09 DEBUG : HTTP RESPONSE (req 0xc0004a6140)
2025/07/17 22:13:09 DEBUG : HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/xml
Date: Thu, 17 Jul 2025 22:13:09 GMT
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
X-Ms-Request-Id: ea510a84-801e-0034-6267-f7488b000000
X-Ms-Version: 2025-05-05

2025/07/17 22:13:09 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:13:09 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:13:09 DEBUG : HTTP RESPONSE (req 0xc000434640)
2025/07/17 22:13:09 DEBUG : HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/xml
Date: Thu, 17 Jul 2025 22:13:09 GMT
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
X-Ms-Request-Id: b1620893-601e-003a-4767-f76b20000000
X-Ms-Version: 2025-05-05

2025/07/17 22:13:09 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:13:09 DEBUG : test.txt: Need to transfer - File not found at Destination
2025/07/17 22:13:09 DEBUG : Azure container test: Waiting for checks to finish
2025/07/17 22:13:09 DEBUG : Azure container test: Waiting for transfers to finish
2025/07/17 22:13:09 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:13:09 DEBUG : HTTP REQUEST (req 0xc0004a6b40)
2025/07/17 22:13:09 DEBUG : PUT /test/test.txt HTTP/1.1
Host: targetaccount.blob.core.windows.net
User-Agent: rclone/v1.70.3
Content-Length: 0
Accept: application/xml
Authorization: XXXX
X-Ms-Date: Thu, 17 Jul 2025 22:13:09 GMT
x-ms-copy-source: https://sourceaccount.blob.core.windows.net/test/test.txt?se=2025-07-17T23%3A13%3A09Z&sig=iNbAVOuVljXdJ3DZHo0fqOT8bA4krDqz37lZl%2BWRDk4%3D&sp=r&sr=b&sv=2025-05-05
x-ms-version: 2025-05-05
Accept-Encoding: gzip

2025/07/17 22:13:09 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:13:09 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:13:09 DEBUG : HTTP RESPONSE (req 0xc0004a6b40)
2025/07/17 22:13:09 DEBUG : HTTP/1.1 403 This request is not authorized to perform this operation.
Content-Length: 465
Content-Type: application/xml
Date: Thu, 17 Jul 2025 22:13:09 GMT
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
X-Ms-Copy-Source-Error-Code: AuthorizationFailure
X-Ms-Copy-Source-Status-Code: 403
X-Ms-Error-Code: CannotVerifyCopySource
X-Ms-Request-Id: b162089f-601e-003a-4e67-f76b20000000
X-Ms-Version: 2025-05-05

2025/07/17 22:13:09 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:13:09 ERROR : test.txt: Failed to copy: single part copy: copy blob: PUT https://targetaccount.blob.core.windows.net/test/test.txt
--------------------------------------------------------------------------------
RESPONSE 403: 403 This request is not authorized to perform this operation.
ERROR CODE: CannotVerifyCopySource
--------------------------------------------------------------------------------
<?xml version="1.0" encoding="utf-8"?><Error><Code>CannotVerifyCopySource</Code><Message>This request is not authorized to perform this operation.
RequestId:b162089f-601e-003a-4e67-f76b20000000
Time:2025-07-17T22:13:09.9568306Z</Message><CopySourceStatusCode>403</CopySourceStatusCode><CopySourceErrorCode>AuthorizationFailure</CopySourceErrorCode><CopySourceErrorMessage>This request is not authorized to perform this operation.</CopySourceErrorMessage></Error>
--------------------------------------------------------------------------------
2025/07/17 22:13:09 ERROR : Attempt 1/1 failed with 1 errors and: single part copy: copy blob: PUT https://targetaccount.blob.core.windows.net/test/test.txt
--------------------------------------------------------------------------------
RESPONSE 403: 403 This request is not authorized to perform this operation.
ERROR CODE: CannotVerifyCopySource
--------------------------------------------------------------------------------
<?xml version="1.0" encoding="utf-8"?><Error><Code>CannotVerifyCopySource</Code><Message>This request is not authorized to perform this operation.
RequestId:b162089f-601e-003a-4e67-f76b20000000
Time:2025-07-17T22:13:09.9568306Z</Message><CopySourceStatusCode>403</CopySourceStatusCode><CopySourceErrorCode>AuthorizationFailure</CopySourceErrorCode><CopySourceErrorMessage>This request is not authorized to perform this operation.</CopySourceErrorMessage></Error>
--------------------------------------------------------------------------------
2025/07/17 22:13:09 INFO  : 
Transferred:   	          0 B / 0 B, -, 0 B/s, ETA -
Errors:                 1 (retrying may help)
Checks:                 0 / 0, -, Listed 1
Elapsed time:         0.1s

2025/07/17 22:13:09 DEBUG : 8 go routines active
2025/07/17 22:13:09 NOTICE: Failed to copy: single part copy: copy blob: PUT https://targetaccount.blob.core.windows.net/test/test.txt
--------------------------------------------------------------------------------
RESPONSE 403: 403 This request is not authorized to perform this operation.
ERROR CODE: CannotVerifyCopySource
--------------------------------------------------------------------------------
<?xml version="1.0" encoding="utf-8"?><Error><Code>CannotVerifyCopySource</Code><Message>This request is not authorized to perform this operation.
RequestId:b162089f-601e-003a-4e67-f76b20000000
Time:2025-07-17T22:13:09.9568306Z</Message><CopySourceStatusCode>403</CopySourceStatusCode><CopySourceErrorCode>AuthorizationFailure</CopySourceErrorCode><CopySourceErrorMessage>This request is not authorized to perform this operation.</CopySourceErrorMessage></Error>
--------------------------------------------------------------------------------
4

For comparison, successful job with v1.69.3:

2025/07/17 22:15:42 DEBUG : rclone: Version "v1.69.3" starting with parameters ["rclone" "copy" "--retries=1" "--dump=headers" "--log-file=rclone.log" "sourceaccount:test" "targetaccount:test"]
2025/07/17 22:15:42 DEBUG : Creating backend with remote "sourceaccount:test"
2025/07/17 22:15:42 DEBUG : Using config file from "/home/kmatt/.config/rclone/rclone.conf"
2025/07/17 22:15:42 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/07/17 22:15:42 DEBUG : Creating backend with remote "targetaccount:test"
2025/07/17 22:15:42 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:42 DEBUG : HTTP REQUEST (req 0xc0007043c0)
2025/07/17 22:15:42 DEBUG : GET /test?comp=list&delimiter=%2F&include=metadata&maxresults=5000&prefix=&restype=container HTTP/1.1
Host: targetaccount.blob.core.windows.net
User-Agent: rclone/v1.69.3
Accept: application/xml
Authorization: XXXX
X-Ms-Date: Thu, 17 Jul 2025 22:15:42 GMT
x-ms-version: 2024-11-04
Accept-Encoding: gzip

2025/07/17 22:15:42 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:42 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:42 DEBUG : HTTP REQUEST (req 0xc000566140)
2025/07/17 22:15:42 DEBUG : GET /test?comp=list&delimiter=%2F&include=metadata&maxresults=5000&prefix=&restype=container HTTP/1.1
Host: sourceaccount.blob.core.windows.net
User-Agent: rclone/v1.69.3
Accept: application/xml
Authorization: XXXX
X-Ms-Date: Thu, 17 Jul 2025 22:15:42 GMT
x-ms-version: 2024-11-04
Accept-Encoding: gzip

2025/07/17 22:15:42 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : HTTP RESPONSE (req 0xc000566140)
2025/07/17 22:15:43 DEBUG : HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/xml
Date: Thu, 17 Jul 2025 22:15:42 GMT
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
X-Ms-Request-Id: b41fccf5-801e-0070-4768-f794e7000000
X-Ms-Version: 2024-11-04

2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : HTTP RESPONSE (req 0xc0007043c0)
2025/07/17 22:15:43 DEBUG : HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/xml
Date: Thu, 17 Jul 2025 22:15:42 GMT
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
X-Ms-Request-Id: 58860c84-301e-0018-0768-f7ae3f000000
X-Ms-Version: 2024-11-04

2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : test.txt: Need to transfer - File not found at Destination
2025/07/17 22:15:43 DEBUG : Azure container test: Waiting for checks to finish
2025/07/17 22:15:43 DEBUG : Azure container test: Waiting for transfers to finish
2025/07/17 22:15:43 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:43 DEBUG : HTTP REQUEST (req 0xc000d63cc0)
2025/07/17 22:15:43 DEBUG : GET /test/test.txt HTTP/1.1
Host: sourceaccount.blob.core.windows.net
User-Agent: rclone/v1.69.3
Accept: application/xml
Authorization: XXXX
X-Ms-Date: Thu, 17 Jul 2025 22:15:43 GMT
x-ms-version: 2024-11-04
Accept-Encoding: gzip

2025/07/17 22:15:43 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : HTTP RESPONSE (req 0xc000d63cc0)
2025/07/17 22:15:43 DEBUG : HTTP/1.1 200 OK
Content-Length: 4
Accept-Ranges: bytes
Content-Md5: uh8lEfwwQjvbsYP+M/PdDw==
Content-Type: text/plain; charset=utf-8
Date: Thu, 17 Jul 2025 22:15:42 GMT
Etag: "0x8DDC57EAE0574B4"
Last-Modified: Thu, 17 Jul 2025 22:10:03 GMT
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
X-Ms-Acl: user::rw-,group::r--,other::---
X-Ms-Blob-Type: BlockBlob
X-Ms-Creation-Time: Thu, 17 Jul 2025 22:07:28 GMT
X-Ms-Group: $superuser
X-Ms-Lease-State: available
X-Ms-Lease-Status: unlocked
X-Ms-Meta-Mtime: 2025-07-17T22:09:47.584771191Z
X-Ms-Owner: $superuser
X-Ms-Permissions: rw-r-----
X-Ms-Request-Id: b41fccfc-801e-0070-4a68-f794e7000000
X-Ms-Resource-Type: file
X-Ms-Server-Encrypted: true
X-Ms-Version: 2024-11-04

2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:43 DEBUG : HTTP REQUEST (req 0xc00108c140)
2025/07/17 22:15:43 DEBUG : PUT /test/test.txt HTTP/1.1
Host: targetaccount.blob.core.windows.net
User-Agent: rclone/v1.69.3
Content-Length: 4
Accept: application/xml
Authorization: XXXX
Content-Type: application/octet-stream
X-Ms-Date: Thu, 17 Jul 2025 22:15:43 GMT
x-ms-blob-content-md5: uh8lEfwwQjvbsYP+M/PdDw==
x-ms-blob-content-type: text/plain; charset=utf-8
x-ms-blob-type: BlockBlob
x-ms-meta-mtime: 2025-07-17T22:09:47.584771191Z
x-ms-version: 2024-11-04
Accept-Encoding: gzip

2025/07/17 22:15:43 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : HTTP RESPONSE (req 0xc00108c140)
2025/07/17 22:15:43 DEBUG : HTTP/1.1 201 Created
Content-Length: 0
Content-Md5: uh8lEfwwQjvbsYP+M/PdDw==
Date: Thu, 17 Jul 2025 22:15:42 GMT
Etag: "0x8DDC57F788F42AC"
Last-Modified: Thu, 17 Jul 2025 22:15:43 GMT
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
X-Ms-Content-Crc64: X5sD6/wydzE=
X-Ms-Request-Id: 58860c9f-301e-0018-1d68-f7ae3f000000
X-Ms-Request-Server-Encrypted: true
X-Ms-Version: 2024-11-04

2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:43 DEBUG : HTTP REQUEST (req 0xc0004283c0)
2025/07/17 22:15:43 DEBUG : HEAD /test/test.txt HTTP/1.1
Host: targetaccount.blob.core.windows.net
User-Agent: rclone/v1.69.3
Accept: application/xml
Authorization: XXXX
X-Ms-Date: Thu, 17 Jul 2025 22:15:43 GMT
x-ms-version: 2024-11-04

2025/07/17 22:15:43 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : HTTP RESPONSE (req 0xc0004283c0)
2025/07/17 22:15:43 DEBUG : HTTP/1.1 200 OK
Content-Length: 4
Accept-Ranges: bytes
Content-Md5: uh8lEfwwQjvbsYP+M/PdDw==
Content-Type: text/plain; charset=utf-8
Date: Thu, 17 Jul 2025 22:15:42 GMT
Etag: "0x8DDC57F788F42AC"
Last-Modified: Thu, 17 Jul 2025 22:15:43 GMT
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
X-Ms-Access-Tier: Hot
X-Ms-Access-Tier-Inferred: true
X-Ms-Acl: user::rw-,group::r--,other::---
X-Ms-Blob-Type: BlockBlob
X-Ms-Creation-Time: Thu, 17 Jul 2025 22:15:43 GMT
X-Ms-Group: $superuser
X-Ms-Lease-State: available
X-Ms-Lease-Status: unlocked
X-Ms-Meta-Mtime: 2025-07-17T22:09:47.584771191Z
X-Ms-Owner: $superuser
X-Ms-Permissions: rw-r-----
X-Ms-Request-Id: 58860caf-301e-0018-2c68-f7ae3f000000
X-Ms-Resource-Type: file
X-Ms-Server-Encrypted: true
X-Ms-Version: 2024-11-04

2025/07/17 22:15:43 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/07/17 22:15:43 DEBUG : test.txt: md5 = ba1f2511fc30423bdbb183fe33f3dd0f OK
2025/07/17 22:15:43 INFO  : test.txt: Copied (new)
2025/07/17 22:15:43 INFO  : 
Transferred:   	          4 B / 4 B, 100%, 0 B/s, ETA -
Transferred:            1 / 1, 100%
Elapsed time:         0.1s

2025/07/17 22:15:43 DEBUG : 8 go routines active
5

good output.

so 1.70.0 introduced the error?
i would check the changelog and github issues.

fwiw, i would test single part server-side copy

and --dump=auth

6

I observed it on 1.70.2 and 1.70.3. Have not tested 1.70.0 or .1

Both --dump=auth and --server-side-across-configs result in same error messages.

7

Also tested with the 1.71 beta referenced in v1.70.[0-2] in Azure: copy from BLOB to BLOB fails with “ManagedIdentityCredential.GetToken() requires exactly one scope” · Issue #8662 · rclone/rclone · GitHub

Same errors.

8

might create a new issue at github and post the weblink into a post here.