Re: I don't understand api_sig

51 views
Skip to first unread message

Jonathan Coleman

unread,
Oct 25, 2020, 1:37:05 PM10/25/20
to remembert...@googlegroups.com
It's probably not a great example that they give in that case because it doesn't look like the md5 hash. The md5 hash (sig) is what should be in place of zxy987.

Jonathan Coleman


On Fri, Oct 23, 2020 at 5:06 PM Johan Nilsson <sven...@gmail.com> wrote:
Hi!

I'm reading the info on the Authentication process, but I find the examples of api_sig confusing.

If I understand correctly, we should first sort the URL parameter keys alphabetically and then concatenate them without = or &. So in your example

?api_key=abc123&perms=delete

becomes

api_keyabc123permsdelete

We shall then prepend our shared secret, for example BANANAS, so it will become

BANANASapi_keyabc123permsdelete

If I then hash that with MD5, I'll get 4f5f544bc82fc20ac2c783e2482f25b2.

But in the example api_sig is zxy987

Where does that come from? It feels like there is something I'm missing here.

--

---
You received this message because you are subscribed to the Google Groups "Remember The Milk API" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rememberthemilk...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/rememberthemilk-api/232255b8-f8a8-4638-bbb9-2b297ef0f16en%40googlegroups.com.

Jonathan Coleman

unread,
Oct 25, 2020, 1:37:14 PM10/25/20
to remembert...@googlegroups.com
Another thing you might consider is that there may be a library in whatever language you are using that abstracts some of this for you to make it easier. For example, if using Node.js, you could use https://www.npmjs.com/package/rtm-api.

Jonathan Coleman

Jennifer Goslee

unread,
Oct 25, 2020, 1:37:26 PM10/25/20
to remembert...@googlegroups.com
I don't have the answer but this was the sname issue that drove me to the API forums as well. I couldn't figure out which perms needed to be hashed for what call was extremely frustrating. (I'm currently just doing a script that sends emails for smart add as a workaround). Your project sounds fun johan, let me know if you need a guinea pig.

Johan Nilsson

unread,
Oct 28, 2020, 1:39:27 PM10/28/20
to Remember The Milk API
Hi! I tried it and got it working, but I think the documentation is much in need of expansion.
Reply all
Reply to author
Forward
0 new messages