Magento – Invalid Signature – add a product using Magento REST API

apimagento-1.7magento-1.8magento-enterpriserest

i have created AccessToken and AccessTokenSecret as mentioned in the Oauth Rest API Documentation and I am able to retrieve the products using GET Request. But when i try to Create a new product (POST Request) using Java, I am always getting "signature_invalid" from magento server.

{"messages":{"error":[{"code":401,"message":"oauth_problem=signature_invalid"}]}}

Here is the Request:

OAuth oauth_nonce="1332732890", oauth_version="1.0", oauth_consumer_key="402ce3406b6d69b74fe7a4b8652bcec1", oauth_signature_method="HMAC-SHA1", oauth_token="f12bbd4012d11f754c1aee4e372ff1db", oauth_timestamp="1402981865", oauth_signature="C6HSsBXzVJ6YahcX3rNzdXlyZuA="

Thanks in advance.

Best Answer

Not sure if this is the problem for you but I had a similar issue the other day.
My problem was actually 2 problems.

The authorization url for admin actions should be ROOT/admin/oauth_authorize not ROOT/oauth/authorize like it is for guest or customer requests.
An admin role should be created in the backend and at least an user must be assigned to it. For that go to System->Web Services->REST Roles click on Add Admin Role.Set the permissions and after the page reloads you should see a tab called Role Users. Click on Reset Search and add at least one admin to the role. Save and try again.

I hope that at least one of the points above solves your problem

Related Solutions

Magento – OAuth for REST API using PHP

The documentation on Magento's site has a good example here

Here's one of the examples that they give for creating a simple product as an Admin user with OAuth authentication.

session_start();
if (!isset($_GET['oauth_token']) && isset($_SESSION['state']) && $_SESSION['state'] == 1) {
$_SESSION['state'] = 0;
}
try {
$authType = ($_SESSION['state'] == 2) ? OAUTH_AUTH_TYPE_AUTHORIZATION : OAUTH_AUTH_TYPE_URI;
$oauthClient = new OAuth($consumerKey, $consumerSecret, OAUTH_SIG_METHOD_HMACSHA1, $authType);
$oauthClient->enableDebug();

if (!isset($_GET['oauth_token']) && !$_SESSION['state']) {
    $requestToken = $oauthClient->getRequestToken($temporaryCredentialsRequestUrl);
    $_SESSION['secret'] = $requestToken['oauth_token_secret'];
    $_SESSION['state'] = 1;
    header('Location: ' . $adminAuthorizationUrl . '?oauth_token=' . $requestToken['oauth_token']);
    exit;
} else if ($_SESSION['state'] == 1) {
    $oauthClient->setToken($_GET['oauth_token'], $_SESSION['secret']);
    $accessToken = $oauthClient->getAccessToken($accessTokenRequestUrl);
    $_SESSION['state'] = 2;
    $_SESSION['token'] = $accessToken['oauth_token'];
    $_SESSION['secret'] = $accessToken['oauth_token_secret'];
    header('Location: ' . $callbackUrl);
    exit;
} else {
    $oauthClient->setToken($_SESSION['token'], $_SESSION['secret']);
    $resourceUrl = "$apiUrl/products";
    $productData = json_encode(array(
        'type_id'           => 'simple',
        'attribute_set_id'  => 4,
        'sku'               => 'simple' . uniqid(),
        'weight'            => 1,
        'status'            => 1,
        'visibility'        => 4,
        'name'              => 'Simple Product',
        'description'       => 'Simple Description',
        'short_description' => 'Simple Short Description',
        'price'             => 99.95,
        'tax_class_id'      => 0,
    ));
    $headers = array('Content-Type' => 'application/json');
    $oauthClient->fetch($resourceUrl, $productData, OAUTH_HTTP_METHOD_POST, $headers);
    print_r($oauthClient->getLastResponseInfo());
}
} catch (OAuthException $e) {
print_r($e);
}

Magento – Invalid Signature when testing API

If all credentials and URLs are correct and existing, the issue might happen because of time synchronization issues of your local with remote (it is important for signatures validation).

Best Answer

Related Solutions

Magento – OAuth for REST API using PHP

Magento – Invalid Signature when testing API

Related Topic