EduMake / chewy

An Alexa Skill for Wookiepeedia
0 stars 0 forks source link

Accepting requests with invalid signature #9

Open stretchyboy opened 7 years ago

stretchyboy commented 7 years ago

The skill does not validate the signature for the incoming requests and is accepting requests with invalid signature specified. Please refer to the document that describes how to build your Alexa Skill as a web service (available via this link: https://developer.amazon.com/public/solutions/alexa/alexa-skills-kit/docs/developing-an-alexa-skill-as-a-web-service) for tips and requirements about validating the requests (and their signatures) sent to your web service.

stretchyboy commented 7 years ago

Should be fixed in leia and chewy by adding a verify: true, config on the server. if we are on latest alexa-app-server