Invalid Signature error

[sherylpeebee]

i'm getting the following message back when i try to upload:

{ error: { message: 'Invalid Signature 53c516a1618fe4d88a81a0b6289e83a205608cbe. String to sign - \'timestamp=1439054775\'.', http_code: 401 } }

i followed the config example provided in the documentation. looks like:

cloudinary.config({ cloud_name: 'some-cloud', api_key: API_KEY, api_secret: CLOUD_API_SECRET });

can anyone tell me what i'm doing wrong?

[zafrani]

Having the same error on my end following
http://cloudinary.com/documentation/upload_images#remote_upload
and
http://cloudinary.com/documentation/upload_images#request_authentication

[baziliolg]

Same here. I'm trying to upload images with cURL and get this error:
{"error":{"message":"Invalid Signature fd6a0434ac39cb3fbeeaf04cd6dfa18ed198eed2. String to sign - 'timestamp=1446836936'."}}

Turns out, *NIX 'echo' command adds a newline by default, so if I do
echo "mystring"|sha1sum it generates "wrong" response. I used echo -n "mystring"|sha1sum and had a liftoff.

[taragano]

I'm sorry for my response delay.

An "Invalid Signature" error response means that the signature you've passed is different than the one Cloudinary expects to allow the upload. The error response also explains the exact string you need to sign.

We usually highly recommend letting our SDK to take care of the signature generation for you behind the scenes. As demonstrated in our sample projects:
https://github.com/cloudinary/cloudinary_npm/tree/master/samples

However, if you still prefer to take care of it yourself, please have a look at the following article:
http://support.cloudinary.com/hc/en-us/articles/203817991-How-to-generate-a-Cloudinary-signature-on-my-own-

[taragano]

@sherylpeebee, @zafrani, @baziliolg - Just wanted to check whether my last response helped with answering your question.
As it's been a while since the last response, I'll close this issue now, but please feel free to re-open it if you need any further assistance.

Thanks

[frankorama]

This worked for me, but adding the "callback" parameter to the list of signed parameters isn't documented anywhere in the API.

[yakirp]

@frankorama - Thanks for bringing this to our attention, we'll add it to our documentation

[animeshsinghweb]

@frankorama @yakirp where and how to add the "callback" parameter? Same issue here.

[frankorama]

const provider = {};  // object with cloudinary api constants like apiSecret and apiKey
function generateUploadUrl(folder){
  let paramArray = [
    {name: 'timestamp', value: cloudinary.utils.timestamp(), toSign: true},
    {name: 'type', value: 'authenticated', toSign: false},
    {name: 'api_key', value: provider.apiKey, toSign: false},
    {name: 'folder', value: folder.toString(), toSign: true},
    {name: 'callback', value: 'http://widget.cloudinary.com/cloudinary_cors.html', toSign: true},
  ];

  let paramsToSign = paramArray.filter(p => p.toSign).reduce((coll, param)=>{
    coll[param.name] = param.value;
    return coll;
  }, {});
  
  let signature = cloudinary.utils.api_sign_request(paramsToSign,  providers.cloudinary.apiSecret);

  let params = paramArray.map(p => `${p.name}=${p.value}`).join('&');
  let paramObj = {};
  paramArray.forEach(p => paramObj[p.name] = p.value);
  paramObj.signature = signature;

  let url = `${provider.uploadUrl}?${params}&signature=${signature}`;
  let retVal = {url: url, parameters: paramObj};

  return retVal;
}

[SkyLeite]

Still not working for me.

"Invalid Signature 8cb46339a4dd5f3459eb2b658b29835b4e45e7e9. String to sign - 'timestamp=1516833104'."

[frankorama]

The good thing about the error message is that it shows you the problem param. Do you have a time stamp in your param list, and is the value in the error message the value you’re encoding?