Zend Framework

Zend_Service_Amazon has until Auguest 15, 2009 to authenticate requests with HMAC-SHA256 of the secret key

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Critical Critical
  • Resolution: Fixed
  • Affects Version/s: 1.8.2
  • Fix Version/s: 1.9.0
  • Component/s: Zend_Service_Amazon
  • Labels:
    None

Description

http://docs.amazonwebservices.com/AWSECommerceService/latest/DG/

You have until August 15, 2009 to authenticate requests sent to the Product Advertising API. After August 15, 2009, messages that aren't authenticated will be denied.

The current interface
$amazon = new Zend_Service_Amazon($appId, $countryCode);
should be like
$amazon = new Zend_Service_Amazon($appId, $countryCode, $appSecretKey);

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
André Bergues added a comment -

this should help
http://mierendo.com/software/aws_signed_query/

i confirm the problem,

In order to do this evolution:

  • add a new parameters with the secret key
  • modify the _prepareOptions L194 in Zend/Service/Amazon.php
Show
André Bergues added a comment - this should help http://mierendo.com/software/aws_signed_query/ i confirm the problem, In order to do this evolution:
  • add a new parameters with the secret key
  • modify the _prepareOptions L194 in Zend/Service/Amazon.php
Hide
Permalink
Benjamin Eberlei added a comment -

I'll look into it for 1.9

Show
Benjamin Eberlei added a comment - I'll look into it for 1.9
Hide
Permalink
Benjamin Eberlei added a comment -

Fixed, will be included in 1.9 release

Show
Benjamin Eberlei added a comment - Fixed, will be included in 1.9 release
Hide
Permalink
Tianon Gravi added a comment -

I've been checking out the (supposedly feature-frozen) 1.9 beta, and have noticed that some of the Amazon APIs are authenticating requests, but that the obvious Zend_Service_Amazon class itself is not. I see the changes in the trunk, however. Are these not to be included in the final 1.9 release after all? Did we miss the feature-freeze?

Show
Tianon Gravi added a comment - I've been checking out the (supposedly feature-frozen) 1.9 beta, and have noticed that some of the Amazon APIs are authenticating requests, but that the obvious Zend_Service_Amazon class itself is not. I see the changes in the trunk, however. Are these not to be included in the final 1.9 release after all? Did we miss the feature-freeze?
Hide
Permalink
Benjamin Eberlei added a comment -

hm, thats not true. i merged it into 1.9 release branch, see yourself http://framework.zend.com/svn/framework/standard/branches/release-1.9/library/Zend/Service/Amazon.php

Show
Benjamin Eberlei added a comment - hm, thats not true. i merged it into 1.9 release branch, see yourself http://framework.zend.com/svn/framework/standard/branches/release-1.9/library/Zend/Service/Amazon.php
Hide
Permalink
Tianon Gravi added a comment -

Ah, I see. I was (erroneously, I guess) looking here, at the 1.9.0 beta 1 release tag: http://framework.zend.com/svn/framework/standard/tags/release-1.9.0b1/library/Zend/Service/Amazon.php

Thanks for your work, however! It's much appreciated!

Show
Tianon Gravi added a comment - Ah, I see. I was (erroneously, I guess) looking here, at the 1.9.0 beta 1 release tag: http://framework.zend.com/svn/framework/standard/tags/release-1.9.0b1/library/Zend/Service/Amazon.php Thanks for your work, however! It's much appreciated!
Hide
Permalink
Walter Huber added a comment -

Maybe I misunderstood the Amazon API but since today I receive errors on every 5th request, as they started to reject randomly unsinged request to test the new singature.
After analysing the funciton "_prepareOptions" I found out the options are sorted alphabetically but not the option "signature" which will be added afterwards.
Since I added "ksort($options);" again, there are no more errors!?
http://docs.amazonwebservices.com/AWSECommerceService/latest/DG/index.html?RequestAuthenticationArticle.html

Show
Walter Huber added a comment - Maybe I misunderstood the Amazon API but since today I receive errors on every 5th request, as they started to reject randomly unsinged request to test the new singature. After analysing the funciton "_prepareOptions" I found out the options are sorted alphabetically but not the option "signature" which will be added afterwards. Since I added "ksort($options);" again, there are no more errors!? http://docs.amazonwebservices.com/AWSECommerceService/latest/DG/index.html?RequestAuthenticationArticle.html

People

Vote (11)
Watch (7)

Dates

  • Created:
    Updated:
    Resolved:
Atlassian JIRA (v4.4.3#663-r165197) | Report a problem
Powered by a free Atlassian JIRA open source license for Zend Framework. Try JIRA - bug tracking software for your team.