Signature V1 being deprecated

[michaeldauria]

Just saw this come into my inbox:

Due to mandate from our security team, we are deprecating signature version v1. We will implement the deprecation in 2 phases. First, the NA endpoint for Sandbox will stop accepting request signed with v1 effective 12/18/2012 in order to prevent customers from developing/integrating using v1 during their Sandbox testing for their future Production use. Second phase, the NA endpoint for Production will stop accepting request signed with v1 during end of Q1 of 2013 (exact date will be announced in early 2013). If you are using Query Method, you will need to change the signature from v1 to v2. You do NOT need to make any change if you are making API calls using SOAP as SOAP only accepts signature v2. However, we would recommend making plan to migrate to Query, if possible, as we have plan to deprecate SOAP in the near future.

[dpickett]

Thanks for the heads up - could you send me the full contents of the email or post it here? I did not receive this email. Thanks again!

[descentintomael]

I got this same email. I'm working on implementing V2 using RightAWS right now. I'll submit a pull request once I've got it all sorted out.

[descentintomael]

And for the record, these are the resource links they provided at the bottom of that email:

Here are some resources for creating request using signature version 2.

Assemble signature Step-by-step

http://docs.amazonwebservices.com/general/latest/gr/signature-version-2.html

http://docs.amazonwebservices.com/AlexaWebInfoService/latest/index.html?CalculatingSignatures.html

http://docs.amazonwebservices.com/AmazonFPS/latest/FPSAggregatedGuide/Sig1VsSig2Diffs.html

http://docs.amazonwebservices.com/general/latest/gr/signing_aws_api_requests.html

http://docs.amazonwebservices.com/AWSSimpleQueueService/2009-02-01/SQSDeveloperGuide/index.html?Query_QueryAuth.html

http://aws.amazon.com/articles/1928?_encoding=UTF8&jiveRedirect=1

[dpickett]

thank you both so much for reporting this. Both clients that utilize this library have not mentioned it.

I'd love to avoid introducing RightAWS as a dependency if it can easily be done.

Thanks,
Dan

[descentintomael]

I was just using that to get started. I'll remove the dependency once I can get a handle on it all.

[descentintomael]

Btw, do you have up to date documentation on the GC API? The newest I have is from early 2010.

[dpickett]

the docs I have handy are earlier than that 😦

[ngan]

Amazon seems to be stopping V1 api end of this month.
Here's the tech specs for V2: https://s3.amazonaws.com/AGCOD/tech_spec/AGCODTechSpec.pdf

Are there any plans for this project to be maintained and upgraded?

[dpickett]

Thanks for asking - I haven't had a project that has requested an upgrade yet, so it's unlikely that I'll carve out the time to upgrade the API. I'd welcome and support pull requests to that effect.

[ngan]

Ah, misread their deadline...it's april 2015.