Have you successfully submitted a Skill using this?

[halgatewood]

I keep getting the follow rejection:

The skill end-point is not accepting valid signed requests. Please make sure that your signature URL validation is correct.

Thanks.

[halgatewood]

Just to follow up. I have tested this to the best of my knowledge with the information on the Alexa site and everything looks correct to me. I have submitted this to an Amazon developer in hopes they could review it.

[relighted]

Did it get accepted? I got the same feedback while I'm using Amazon api gw. Can't make heads or tails from this feedback.

[halgatewood]

I could never get it to be accepted so I switched to the Lambda function method and it got accepted. Here is my code if you are interested: https://gist.github.com/halgatewood/f94896edc69b6cfbef71f20d8d91d696

[rbowen]

I never actually got a skill accepted into the skill "store", but I've
been doing them primarily for my own benefit, so that hasn't mattered.
The ones that I've tried failed for other reasons than the security token.

One of these days I'll have to figure this out.

--Rich

On 11/15/2016 09:58 AM, Hal Gatewood wrote:

I could never get it to be accepted so I switched to the Lambda function
method and it got accepted. Here is my code if you are interested:
https://gist.github.com/halgatewood/f94896edc69b6cfbef71f20d8d91d696

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#1 (comment),
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAPnQNwQE8lcRwekuXKwpGR_DUzBeCIdks5q-ciMgaJpZM4IdPPx.

Rich Bowen - rbowen@rcbowen.com - @rbowen
http://apachecon.com/ - @apachecon

[tlf30]

I have a very simple skill that I am using to test this will, I will let you know. I did disable the part of it that checked the userId field.

[tlf30]

OK, it does not pass end point validation:

The skill end-point is not validating the signatures for incoming requests and is accepting requests with an invalid signature URL specified. Please make sure that your signature validation is correct.

[rbowen]

Well, that's frustrating. And the documentation on what's actually involved in passing the signature validation is absurdly unclear.

…

On 06/26/2017 06:10 PM, Trevor Flynn wrote: OK, it does not pass end point validation: < The skill end-point is not validating the signatures for incoming requests and is accepting requests with an invalid signature URL specified. Please make sure that your signature validation is correct. > — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#1 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAPnQCq0VsT2QewIxHUW_f8XDxBPXPreks5sICxJgaJpZM4IdPPx>.

-- Rich Bowen - rbowen@rcbowen.com - @rbowen http://apachecon.com/ - @apachecon

[tlf30]

I agree completely, I have read it a dozen times and from what I can tell this should work. I am trying a few tweaks and will get back to you on what I find. But so far I have not had any luck.

[jockking]

Have a look at the test cert urls that Amazon send to your server when testing. They look for the URL to be fully normalized e.g ../../ should be normalized. You'll see what I mean if you turn on your logging. Might help with the certification problems.

[kobi-wan]

I'm also in the process of certifying my skill. For validating the URL I used this library: https://github.com/glenscott/url-normalizer.
Update: It's now certified. 😊 I had to submit it several times and didn't know the exactly problem. But I figured out than, that I have to response with a 401 or 403 http error code, if there is something not valid.