Create signed request (signature)

[cloudinary]

Create signed request (signature)

[odannyc]

After more digging of the code I found this:

cloudinary-go/api/api.go

Lines 211 to 224 in 320ac57

	func SignParameters(params url.Values, secret string) (string, error) {
	params.Set("timestamp", strconv.FormatInt(time.Now().Unix(), 10))
	encodedUnescapedParams, err := url.QueryUnescape(params.Encode())
	if err != nil {
	return "", err
	}
	rawSignature, err := signature.Sign(encodedUnescapedParams, secret, signature.SHA1)
	if err != nil {
	return "", err
	}
	return hex.EncodeToString(rawSignature), nil
	}

Can I simply return that string to the frontend for them to use on a signed upload request?

[igy]

Hi Danny,

Yes, the output from that function should be a valid signature for a signed upload, and passing the signature string from the backend to the frontend is the same method we recommend for similar cases, like using our Javascript Upload Widget with signed upload where the signature comes from some backend code.

That said, the parameters sent on the API call must match the parameters used to create the signature, and the highlighted function is also setting the timestamp that's used on the request, so you need to pass the same timestamp to your frontend also and use it on the API call ( e.g.

cloudinary-go/api/uploader/upload.go

Line 103 in 3ea19ca

requestParams.Set("timestamp", signatureParams.Get("timestamp"))

where the timestamp used in teh signing function is added to the API call)

If there's any problem with the signature you send on an API call, note that our error response shows the string we signed when checking the provided signature, so it's often easy to see why the signature didn't match

Thanks,
Stephen