Title: REST API HTTP Authentication problem
Last modified: September 1, 2016

---

# REST API HTTP Authentication problem

 *  Resolved [martinlmedina](https://wordpress.org/support/users/martinlmedina/)
 * (@martinlmedina)
 * [9 years, 10 months ago](https://wordpress.org/support/topic/rest-api-http-authentication-problem/)
 * Hi
 * I’m new using woocommerce;
 * I’m reading the following manual
 * [http://woothemes.github.io/woocommerce-rest-api-docs/#authentication-over-http](http://woothemes.github.io/woocommerce-rest-api-docs/#authentication-over-http)
 * I’m trying authenticate but I get the following error:
 * _{ “Errors”: [{“code”: “WooCommerce api authentication error”, “message”: “Invalid
   signature – does not match the signature provided”}]}_
 * **Info:**
 * **Site:**
    [http://redywoo.vics.srl](http://redywoo.vics.srl)
 * **Example**
    [http://redywoo.vics.srl/wc-api/v1/products](http://redywoo.vics.srl/wc-api/v1/products)
 * **consumer key**
    _[API keys redacted]_
 * **consumer secret key **
    _[API keys redacted]_
 * ———————————————-
 * **signature base string**
    _[API keys redacted]_
 * **signature**
    _[API keys redacted]_
 * **url**
    [http://redywoo.vics.srl/wc-api/v1/products?oauth_consumer_key=](http://redywoo.vics.srl/wc-api/v1/products?oauth_consumer_key=)_[
   API keys redacted]_&oauth_nonce=9062660784657346&oauth_signature=_[API keys redacted]_&
   oauth_signature_method=HMAC-SHA1&oauth_timestamp=1439148955
 * ———————————————-
 * All information provided is real; including the keys.
    Once work will generate
   new keys.
 * I appreciate any help.
 * Martin
 * [https://wordpress.org/plugins/woocommerce/](https://wordpress.org/plugins/woocommerce/)

Viewing 7 replies - 1 through 7 (of 7 total)

 *  [Caleb Burks](https://wordpress.org/support/users/icaleb/)
 * (@icaleb)
 * Automattic Happiness Engineer
 * [9 years, 10 months ago](https://wordpress.org/support/topic/rest-api-http-authentication-problem/#post-7613026)
 * Hey Martin,
 * First up, I would recommend deleting those keys right away. Definitely not wise
   to post live keys to the internet in public.
 * Secondly, what are you trying to do? Perhaps using one of these authentication
   libraries would help: [http://woothemes.github.io/woocommerce-rest-api-docs/#libraries-and-tools](http://woothemes.github.io/woocommerce-rest-api-docs/#libraries-and-tools)
 *  Thread Starter [martinlmedina](https://wordpress.org/support/users/martinlmedina/)
 * (@martinlmedina)
 * [9 years, 10 months ago](https://wordpress.org/support/topic/rest-api-http-authentication-problem/#post-7613037)
 * Caleb thanks for the advice, but it is a test environment.
 * I’m trying to authenticate to access via http api rest, to list products, create
   products etc.
 * I followed step by step tutorial instructions but have not been successful.
 * So i show all of the information necessary to access, to see if anyone knows’m
   making mistake.
 *  Plugin Contributor [Mike Jolley](https://wordpress.org/support/users/mikejolley/)
 * (@mikejolley)
 * [9 years, 10 months ago](https://wordpress.org/support/topic/rest-api-http-authentication-problem/#post-7613071)
 * There are additional notes on signature generation in that doc. Most people make
   the mistake of not ordering the vars alphabetically before generating it.
 *  Thread Starter [martinlmedina](https://wordpress.org/support/users/martinlmedina/)
 * (@martinlmedina)
 * [9 years, 10 months ago](https://wordpress.org/support/topic/rest-api-http-authentication-problem/#post-7613094)
 * I also took additional notes.
    As you can see in the URL; The parameters are 
   in alphabetical order.
 * oauth_consumer_key=[API keys redacted]
    oauth_nonce=9062660784657346 oauth_signature
   =[API keys redacted] oauth_signature_method=HMAC-SHA1 oauth_timestamp=1439148955
 *  [Caleb Burks](https://wordpress.org/support/users/icaleb/)
 * (@icaleb)
 * Automattic Happiness Engineer
 * [9 years, 10 months ago](https://wordpress.org/support/topic/rest-api-http-authentication-problem/#post-7613120)
 * Hard to say what is going wrong in your authentication. Have you tried using 
   one of the official libraries? Could help you find the problem in your own.
 *  Thread Starter [martinlmedina](https://wordpress.org/support/users/martinlmedina/)
 * (@martinlmedina)
 * [9 years, 10 months ago](https://wordpress.org/support/topic/rest-api-http-authentication-problem/#post-7613129)
 * Caleb I have not tried the official libraries; I’ve only tested via http.
    I’m
   developing a plsql to WooCommerce integration. We would greatly appreciate if
   you can help with this.
 *  Thread Starter [martinlmedina](https://wordpress.org/support/users/martinlmedina/)
 * (@martinlmedina)
 * [9 years, 10 months ago](https://wordpress.org/support/topic/rest-api-http-authentication-problem/#post-7613138)
 * the documentation is wrong; since the base string used to generate the signature
   is incomplete.
 * 1-Correct base string
 * GET&http%3A%2F%2Fwww.example.com%2Fwc-api%2Fv2%2Fproducts&oauth_consumer_key%
   3D[API keys redacted]%26oauth_nonce%3Dyxakolfnjdyfnhtcqtfyeeepypjspzhj%26oauth_signature_method%
   3DHMAC-SHA1%26oauth_timestamp%3D1469829703
 * 2-Correct URL
 * [http://www.example.com/wc-api/v2/products?oauth_consumer_key=abcd1234&oauth_timestamp=1469829703&oauth_nonce=yxakolfnjdyfnhtcqtfyeeepypjspzhj&oauth_signature_method=HMAC-SHA1&oauth_signature=%5BBase64](http://www.example.com/wc-api/v2/products?oauth_consumer_key=abcd1234&oauth_timestamp=1469829703&oauth_nonce=yxakolfnjdyfnhtcqtfyeeepypjspzhj&oauth_signature_method=HMAC-SHA1&oauth_signature=%5BBase64)
   and Percent encode base string]
 * Thks

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘REST API HTTP Authentication problem’ is closed to new replies.

 * ![](https://ps.w.org/woocommerce/assets/icon.svg?rev=3234504)
 * [WooCommerce](https://wordpress.org/plugins/woocommerce/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/woocommerce/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/woocommerce/)
 * [Active Topics](https://wordpress.org/support/plugin/woocommerce/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/woocommerce/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/woocommerce/reviews/)

 * 7 replies
 * 3 participants
 * Last reply from: [martinlmedina](https://wordpress.org/support/users/martinlmedina/)
 * Last activity: [9 years, 10 months ago](https://wordpress.org/support/topic/rest-api-http-authentication-problem/#post-7613138)
 * Status: resolved