security issue - cannot validate signature about pilbox HOT 2 CLOSED

The client_key is used to sign the query string, but it is not itself the sig value. For example,

$ python -m pilbox.signature --key=abcdef "x=1&y=2&z=3"
Query String: x=1&y=2&z=3
Signature: c9516346abf62876b6345817dba2f9a0c797ef26
Signed Query String: x=1&y=2&z=3&sig=c9516346abf62876b6345817dba2f9a0c797ef26

A client_key of abcdef produces a signature value of c9516346abf62876b6345817dba2f9a0c797ef26 for the query string x=1&y=2&z=3. So to secure that request, you would make the request as x=1&y=2&z=3&sig=c9516346abf62876b6345817dba2f9a0c797ef26. Please refer to the Signing section for more details about signing your requests.

from pilbox.

Thanks, now it's clear.

from pilbox.