rest/V1/products?searchCriteria[page Size]=10 giving signature error magento 2.4.5

Question

I am calling Magento rest API to load all products of a site.

https://store_url/rest/V1/products?searchCriteria[pageSize]=10

It gives the following error -

 "message": "The signature is invalid. Verify and try again."

I am calling it through a Laravel project. I am not getting any errors while calling a single product or order GET API. I am only getting this error for the APIs that contain query parameters.

I really appreciate any help you can provide.

Answer 1

If you call the API from another source of a project, like Laravel, you will definitely get this error as:

• The signature error occurs with either a malformed URL or rejected Access Token/Token Secret authorized by admin.

Did you try to run it on Postman?

So, first, you need to authorize: Try using a bearer token , set up HTTP client operation header "Content-Type = application/json" , "Authorization = Bearer

To generate a Token, follow this https://devdocs.magento.com/guides/v2.4/get-started/authentication/gs-authentication-token.html

You can also go through this: https://github.com/grayloon/magento-laravel-api

Answer 2

In assumption this use for dev environment or published resource such as catalog, you can done it without authenticator, try this https://experienceleague.adobe.com/docs/commerce-admin/config/services/magento-web-api.html?lang=en#web-api-security

Answer 3

The error comes from this method in the codebase \Magento\Framework\Oauth\Oauth::_validateSignature

Seems that your generated oauth_signature value in your request headers does not match the oauth_signature_method you've defined in your request headers? A reminder that in Magento version 2.4, Magento only allows for HMAC-SHA256 signatures.

If the above is not the issue, maybe your request is missing some data? Certainly seems to be an issue with authentication regardless. Would definitely be worth having a read of the Magento Oauth devdocs - linked below:

• https://developer.adobe.com/commerce/webapi/get-started/authentication/gs-authentication-oauth/#get-a-request-token