Amazon AWS API REST Authentication for PHP 5

There’s an error in your code —

$signature = urlencode(base64_encode(hash_hmac(‘sha256’, $secret_key, $signature_string)));

should read

$signature = urlencode(base64_encode(hash_hmac(‘sha256’, $signature_string, $secret_key)));

(the order of arguments was wrong)

For some reason, I got a signature error when using the code.
So I changed the line:
from
// calculate HMAC with SHA256 and base64-encoding
$signature = base64_encode(hash_hmac(“sha256”, $string_to_sign, $private_key));
to
// calculate HMAC with SHA256 and base64-encoding
$signature = base64_encode(hash_hmac(“sha256”, $string_to_sign, $private_key, True));

Then it works!

Note: the “True” parameter is for output raw binary data.

Thanks for the code!

Thank’s a lot. That was very useful.

Not work for me eighter with or without

$signature = base64_encode(hash_hmac(”sha256″, $string_to_sign, $private_key));

$signature = base64_encode(hash_hmac(”sha256″, $string_to_sign, $private_key, True));

I did it in perl, and I start perl with system()

thanks, this helped a lot. for it to work for me, i needed TRUE for hash_mdac() and I also had to change the timestamp to:

$parameters[‘Timestamp’] = gmdate(“Y-m-d\TH:i:s.000\Z”);

instead of

$parameters[‘Timestamp’] = gmdate(“Y-m-d\TH:i:s\Z”);

Holy crap, that worked!! Brilliant thankyou. I added the $yoursecretamazonket and $your amazonaccesskey variables at the top of my original code, changed my $response line to your suggestion and cut and pasted your function to the top of my entire code. Put that in a block, and it worked, got my wishlists back! thankyou.

P.S with my newfound enthusiasm I tried to fix another broken part of my site where a user enters his amazon account email address and my site returns his wishlist id(s).

the my-amzemail comes from a submit form on my Drupal Wishlist Panel page,
(

)
which posts the users email address back to the Wishlist Panel page within Drupal
the code below takes that email and creates an amazon request which was working before, so I added my 2 new variables, swapped my $response line and pasted the function above the whole code.
Didn’t work though
I’ll keep plugging away but any ideas are appreciated.
Cheers
Duncan

<?php
print 'Your Wishlist(s) ' ;
$listemail=$_POST['my-amzemail'];
$request = 'http://ecs.amazonaws.co.uk/onca/xml?Service=AWSECommerceService&AWSAccessKeyId=AKIAJ6VMM6PWOTPZVCMA&Operation=ListSearch&ListType=WishList&Email='. $listemail .'';
 
$response = file_get_contents($request);
if (!$response) {
  die('Web service request failed');
}
$xml = new SimpleXMLElement($response);
?>
 Lists;
foreach($lists->List as $list){
$ListURL = $list->ListURL;
$ListName = $list->ListName;
$TotalItems = $list->TotalItems;
$ListId = $list->ListId;
print("$ListName ID no.($ListId) has $TotalItems items.");
}
?>

I’m using your code and the response coming back from Amazon says that I have the wrong format for the Timestamp. It says:
Correct format is (ISO 8601 UTC) “YYYY_MM_DDThh:mm:ssZ
I’ve tried:
Y-m-d\TH:i:s.000\Z
Y-m-d\TH:i:s\Z
Y_m_d\TH:i:s.000\Z
Y_m_d\TH:i:s\Z

The encoded param looks right: 2009_08_19T17%3A01%3A35Z

And a bunch of other combinations and it doesn’t seem to work. I’m trying to do a ListSearch for wishlists on the ecs.amazonaws.com US server.
Thanks,
Brian

Thanks works like a charm

Thanks for the great script.

Got it working on my laptop in under 5 minutes.

Only problem is when I uploaded the code to my Linux server it does not authenticate.

I have been unable to spot any platform specific functions in the PHP script.

The only differences from inspecting the variables is that the $signature variable comes out 8 characters longer on the Windows machine than the Linux machine.

Any thoughts?

Anyone else had the same issue?

You Rock!. I have been trying to get my code to work and here it is. You’ve done it! and it works.

Thanks a Bunch!

I have some problems with $newrequest

i try this
$newrequest = getRequest($secret_key, $request, $access_key = false, $version = ‘2009-03-01’);
then i get a new request with secretkey & timestamp but i still Error when i open a new request on browser

“is not a valid value for Signature. Please change this value and retry your request.”

someone help please(i’m noob)

thank you.

HELP! I have implemented every change that have been suggested and I still get the “SignatureDoesNotMatch”. Is it possible for someone to dump a complete script on the site that works?

Thanks

good

Thanks so much for your code! we are using it over at LoudSongs.com to get album artwork from amazon. It works great.

The script stopping working now? Have anyone test it again.
I used it to test lookup items.

Thank you!!
I’ve been going through the documentation on Amazon all night, but all examples I’ve been able to find are half-baked at best and don’t even include signing the bloody (REST-)request = examples don’t work.

With your code though, I had it working within two minutes.
So thanks again for saving me X hours of digging through the Amazon docs

Best Regards,
Mike

Thanks for providing detailed method.
I have used this, but got below error :
SignatureDoesNotMatch The request signature we calculated does not match the signature you provided. Check your key and signing method.
I have tried each possible ways by changing the timestamp and using also htt_request2 method., but got the same above error. Please suggest the mistake or solution for the same. Thanks in advance. Please provide response ASAP.