oauth_problem signature_invalid

[Justin]

Hi all,

I got an error of signature_invalid.

Request:

GET&https://openapi.etsy.com/v2/oauth/scopes&oauth_consumer_key=*************************&oauth_nonce=5183507&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1400051882&oauth_token=*************************&oauth_version=1.0

I open the follow url with browser directly.

https://openapi.etsy.com/v2/oauth/scopes?oauth_consumer_key=*************************&oauth_nonce=5183507&oauth_token=*************************&oauth_timestamp=1400051882&oauth_signature_method=HMAC-SHA1&oauth_version=1.0&oauth_signature=dprbc4yd%2b8cVz3V8%2fwiSfMy3TA0%3d

Response:

1. Accept-Ranges:
   bytes
2. Cache-Control:
   private
3. Connection:
   Keep-Alive
4. Content-Encoding:
   gzip
5. Content-Length:
   238
6. Content-Type:
   text/plain;charset=UTF-8
7. Date:
   Wed, 14 May 2014 07:20:41 GMT
8. Keep-Alive:
   timeout=10, max=50
9. Server:
   Apache
10. Vary:
    Accept-Encoding
11. Via:
    1.1 varnish
12. WWW-Authenticate:
    OAuth realm="Etsy"
13. X-Cache:
    MISS
14. X-Cache-Hits:
    0
15. X-Cnection:
    close
16. X-Error-Detail:
    oauth_problem=signature_invalid&debug_sbs=GET&https%3A%2F%2Fopenapi.etsy.com%2Fv2%2Foauth%2Fscopes&oauth_consumer_key%3D*************************%26oauth_nonce%3D5183507%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1400051882%26oauth_token%3D*************************%26oauth_version%3D1.0
17. X-Etsy-Request-Uuid:
    o56b73LDoFbMmXsTDwQrIKrcRVzN
18. X-OAuth-Problem-Definitions:
    http://etsy.me/oauth-problem-reporting
19. X-Served-By:
    cache-sv60-SJC3
20. X-Timer:
    S1400052041.196811914,VS0,VE101

Does anybody know how to resolve it?

Thanks.

[Graeme Grant]

The "X-Error-Detail" indicates "signature_invalid" & "X-OAuth-Problem-Definitions" points you to the explanation: "signature_invalid: the oauth_signature is invalid. That is, it doesn't match the signature computed by the Service Provider.".
 
Check that you are calculating the signature value correctly.
 
G.

 

---

Date: Wed, 14 May 2014 00:31:40 -0700
From: wang19...@gmail.com
To: etsy-...@googlegroups.com
Subject: oauth_problem signature_invalid

--
You received this message because you are subscribed to the Google Groups "Etsy API" group.
To unsubscribe from this group and stop receiving emails from it, send an email to etsy-api-v2...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Michael Darling]

I recently battled this.  I found a great javascript signature calculator at: http://oauth.googlecode.com/svn/code/javascript/example/signature.html

It signs in your browser, doesn't hit their server, so you can enter all the keys and secrets.  You can enter the timestamp and nonce generated by your OAuth library, as a double check.

What language & OAuth library are you using for the OAuth parameters & signature?

[Justin]

Tkanks for your reply. I have found the reason.

[Justin]

It's a good tools. Thanks.

[Mitch McPhee]

Hi,

What was the reason? I'm in the exact same boat you are...I'm being told my signature is invalid and I can go directly to the URL and download a request token. If my signature was invalid, I couldn't do that.

[Rob]

Are you definitely using GET for the request? I was stuck on this after stupidly not seeing that my script was using POST lol.