ETSY API Help Please 403 Error

[Joseph Brown]

I've been trying to get OAuth to work for going on 4 days. I have all my authentication taken care of but cannot for the life of me create a listing. I may of had a break today when I spotted that the the 403 Error I'm getting is tagged "Forbidden" which I believe means I have not yet been granted the appropriate privileges. Can anyone confirm that this is my problem?

I wouldn't think this would be an issue since I'm only trying to post to my own store. Just incase it was necessary I had requested full access under the app's preferences and it had been pending for a few days, but today it seems to have reset itself to "Request Full Access" which makes me wonder if I was denied.

Is this my problem? Is there some way to expedite the process of getting approved. I can't really test my work if this is the issue.

Thanks!! for any help or comments and or ideas I've add a header for debugging

HTTP/1.1 403 Forbidden

Date: Thu, 07 Aug 2014 19:40:59 GMT

Server: Apache

X-Etsy-Request-Uuid: hd6FJGTKJ44RfAdtghsDqvT085RG

X-Error-Detail: oauth_problem=signature_invalid&debug_sbs=POST&https%3A%2F%2Fopenapi.etsy.com%2Fv2%2Fprivate%2Flistingsquantity%3D1&category_id%3D69150353%26description%3DtestDescription%26is_supply%3Dfalse%26oauth_consumer_key%[masked]%26oauth_nonce%3D11v1wn24b82625olel5jgtch06q7nx5p%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1407440457%26oauth_token%3D[masked]%26oauth_version%3D1.0%26price%3D1%26quantity%3D1%26title%3DtestTitle%26when_made%3D1970s%26who_made%3Dsomeone_else

Cache-Control: private

X-Cnection: close

Content-Type: text/plain;charset=UTF-8

Content-Length: 529

Accept-Ranges: bytes

Via: 1.1 varnish

X-Served-By: cache-sjc3124-SJC

X-Cache: MISS

X-Cache-Hits: 0

X-Timer: S1407440459.206241369,VS0,VE112

Vary: Accept-Encoding

Set-Cookie: uaid=uaid%3DUi21LIsNssVnkNTwEOHT2Pg651dJ%26_now%3D1407440459%26_slt%3DPNQi0F5A%26_kid%3D1%26_ver%3D1%26_mac%3D_Kg-l7GOphpK303JsfY6m6zXWESFj5t7IjiyHmkc3qk.; expires=Sat, 06-Aug-2016 19:40:59 GMT; path=/; domain=.etsy.com; httponly

Connection: close

[Crew Coppelia]

Check your spambox, there you will likely find the denial reason. They deny acces if you use it only on your own site.

You make a call to /private/listingquantity?

shouldn't it be to /listing?



Op donderdag 7 augustus 2014 22:05:12 UTC+2 schreef Joseph Brown:

[Joseph Brown]

Thank you for replying!!!!

Good Catch, but I think it should actually be a ampersand. I'm sure that wasn't helping anything but even with it fixed it doesn't work.

I have a few questions if you have answers. I've just been stabbing in the dark try to glue fragments of information together.

1. If the app is for my own shop does that mean I won't ever create a listing?

2. Do you know the exact format of the base string for the OAuth Request with Etsy variables appended?

3. Do the Etsy variables need to be appended to the post url?

4. Do the Etsy variables need to be added to the post's content even though they are sent in the post variables?

5. Does the header below appear to be formated as Etsy expects

OAuth realm="openapi",
oauth_version="1.0",
oauth_consumer_key="api_key",
oauth_token="access_token",
oauth_timestamp="1407451170",
oauth_nonce="vk0y5efiawphoa7tol3vhuqo7puqfeir",
oauth_signature_method="HMAC-SHA1",
oauth_signature="bmPXi9buakEBJNyPFpeCphthK18%3D"

[Crew Coppelia]

api_key should be your application key

nonce seems to be a bit long? I am no expert.

Any chance of sharing the total URL you are requesting? What language do you use?

Did you try to just do a request without specific variables?

is the %3D ('=')part of your signature ok?

Op donderdag 7 augustus 2014 22:05:12 UTC+2 schreef Joseph Brown:

I've been trying to get OAuth to work for going on 4 days. I have all my authentication taken care of but cannot for the life of me create a listing. I may of had a break today when I spotted that the the 403 Error I'm getting is tagged "Forbidden" which I believe means I have not yet been granted the appropriate privileges. Can anyone confirm that this is my problem?

[Etsy API]

Hi Joseph,

Sorry to hear you've been having trouble with this. It may help to review our resources on making requests, available here:

https://www.etsy.com/developers/documentation/getting_started/requests

If after checking that your request is in line with our docs and you're still seeing this issue, please provide the new UUID, request path, and response, and I'll be happy to take a look.

Sara

[Joseph Brown]

Thank you Sara

I was missing missing the api_key from my request, or at least I think this was the problem as I received the new error "This is a restricted API key and this user is not in the authorized set. Please contact the app creator for more information."

I don't know why I would be restricted from my own store though. Any help would be greatly appreciated!!!

UUID:

X-Etsy-Request-Uuid: e7kexyQo7nk0C-C3y6YcKbKDByCR

Request Path:

https://openapi.etsy.com/v2/private/listings?api%5Fkey=4i4cxfqucsqmdejrh6s6gy4v&quantity=1&title=testTitle&description=testDescription&price=1&category%5Fid=69150353&who%5Fmade=someone%5Felse&is%5Fsupply=false&when%5Fmade=1970s

Response:

This is a restricted API key and this user is not in the authorized set. Please contact the app creator for more information.

Thank you very very much!!!

[Etsy API]

Hi Joseph,

Thank you for the update. It appears that you might not be providing OAuth credentials along with your request. More info on using OAuth can be found here:

https://www.etsy.com/developers/documentation/getting_started/oauth

Also, please be careful not to share your API key or other sensitive details in public areas. I've deactivated your key and created a new one for you; if you have any trouble using the new key, please get in touch with us directly at deve...@etsy.com and I'll be happy to help.

Sara

[Joseph Brown]

Sara,

I sent a message Friday later on in the day to deve...@etsy.com because I'm still having trouble. It was later in the day and I'm on pacific time so they may not have even seen it. Can you tell me how long I should expect it to take for them to get back to me? Also I'm nearly certain at this point that my trouble is related to only having provisional privileges. Again my trouble is in trying to create a listing via a post over oauth. I thought that I would have full access to my own store, but I've read some things that lead me to believe that this might not be the true. Can you confirm that this is the case? Also I've applied for full access and your documentation says that it could take up to 2 weeks for approval is there any way to expedite this? otherwise I have to serious explaining to do.

Thank you,

Joe

[Joseph Brown]

I sent another message to deve...@etsy.com at 11:19am (pst)

[Joseph Brown]

ETSY API has anyone had a chance to look at this?

[Vasiliy Sobol]

Have you solved your problem?

среда, 13 августа 2014 г., 22:00:13 UTC+3 пользователь Joseph Brown написал:

[Vasiliy Sobol]

Hello, Joseph. Have you solved your problem? I have the same issue right now, and i need help

среда, 13 августа 2014 г., 22:00:13 UTC+3 пользователь Joseph Brown написал:

ETSY API has anyone had a chance to look at this?

[Joseph Brown]

Vasiliy,

I did eventually figure out the problem. I had never used OAuth before; so it was a trial by error process. As I recall you need to send the fields in alphabetical order or it causes the problem. I never considered that could actually cause a problem. The following utility helped me test my way through, maybe it will help you.

https://oauth.googlecode.com/svn/code/javascript/example/signature.html

Good Luck,

Joe

[Vasiliy Sobol]

Thank you. It didn`t help, but anyway

понедельник, 28 марта 2016 г., 19:21:01 UTC+3 пользователь Joseph Brown написал:

[vamshi reddy]

Did you open your shop on the site by providing credit card details or pay pal account??

[vamshi reddy]

[Keith Phillips]

A couple things…

 

1.       If your app only has limited access, you will only be able to add listings to your account that is tied to your developer account. So be sure a seller account is set up and all finance stuff in line underneath your developer account. This will get you access to post listings at least until your developer account has full access for making changes to other peoples accounts.

2.       Make sure when you do your original access token that you pass the permission scopes listings_w listings_d listings_r

3.       I believe the params for the listing need to be in the post body (data) not in the querystring. So category, description etc should not be in the query string. Hard to tell where you are posting that part to from below. They should be in the data section of a multipart/form post.

--
You received this message because you are subscribed to the Google Groups "Etsy API" group.
To unsubscribe from this group and stop receiving emails from it, send an email to etsy-api-v2...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.