wrong checksum when using php-api

[Egor Petrov]

Good day. I have some problem with generating checksum.
I look source code for php-api, jsp-demo, checksum calculated only with string "getMeetings" and salt, Sometimes random number, for strong security. No meeting id or anything else. I check it with bbb api buddy http://omarshammas.com/bbb_api_buddy.html and i see, that changing
Meeting ID change checksum. (?!) Why and how? Is bbb api buddy work correctly? Sorry for my bad english.
PS: just when i try use php-api with checksum calculated in this way: sha1("getMeetings".$this->_securitySalt); i got <messageKey>checksumError</messageKey>. I check, salt in config,php and bigbluebutton.properties the same.
What wrong?

[Fred Dixon]

Hi Egor,

> No meeting id or anything else. 

That's right, for getMeetings, there is no parameter to send, just a valid checksum calculated as

  https://code.google.com/p/bigbluebutton/wiki/API#API_Security_Model

The getMeetings call is usually done server-to-server, so the URL is never visible to the users.  

> I check it with bbb api buddy http://omarshammas.com/bbb_api_buddy.html and i see, that changing

MeetingID change checksum.

That's because the API Buddy code is passing a random value in the URL string, and it's using the current meetingID as the 'random' value.  When you change the meetingID, it changes the checksum.

This is a developer-focused question (not an end-user question).  Recommend in the future you post developer related questions to bigbluebutton-dev, 

  https://groups.google.com/group/bigbluebutton-dev/topics?gvc=2

Regards,... Fred

-- 
BigBlueButton Developer

http://bigbluebutton.org/
http://code.google.com/p/bigbluebutton

BigBlueButton on twitter: @bigbluebutton

--
You received this message because you are subscribed to the Google Groups "bigbluebutton-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-u...@googlegroups.com.
To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at http://groups.google.com/group/bigbluebutton-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.