xeroapi / xerooauth-php Goto Github PK

Hi

Thanks for the library for php user
Just wondering if is possible to solve how to upload a pdf file to xero as attachment for invoices

Regards
Sam

This library should be available as a composer package.

The request method always merges the value from $_REQUEST['order'] (which it defaults to an empty string) with parameters specified as the 3rd parameter to the method. It is therefore impossible to pass an order in code like:

$params = array(
    'where' => 'Type="ACCREC"',
    'order' => 'InvoiceNumber ASC'
);

$response = $this->xeroOAuth->request('GET', $this->xeroOAuth->url('Invoices', 'core'), $params);

The value of order specified in the params is overridden by an empty string and the order is ignored.

Ignore this, I was doing it wrong.

I try

$rid = $response->Receipts->Receipt->ReceiptID;

$this->_instance->request('POST', $this->_instance->url('Receipts', 'core') . "/$rid/Attachments/$file_name/", array("@$local_file"));

But got a oauth_problem=signature_invalid

I was receiving the following warnings doing a POST to /Invoices, which was returning a 401 Invalid Signature from the API:

A PHP Error was encountered

Severity: Warning

Message: Illegal string offset 'xml'

Filename: libraries/XeroOAuth.php

Line Number: 303
A PHP Error was encountered

Severity: Warning

Message: Invalid argument supplied for foreach()

Filename: libraries/XeroOAuth.php

Line Number: 329
A PHP Error was encountered

Severity: Warning

Message: implode(): Invalid arguments passed

Filename: libraries/XeroOAuth.php

Line Number: 332

these pointed to the empty POST method switch on Line 226:

case 'POST':

    break;

Simply creating the empty array, ala:

case 'POST':
    $this->request_params = array();
    break;

(or better yet before the switch on 225) fixed the issue, but I am wondering why this whole block was left empty???

can get detail info on below web page
https://secure.phabricator.com/T5913

It may not be a bug of this example, we can consider add doc info here, or add some check in sample code and comment it.

ENV:
mac os x version:
10.10.1 (14B25)
php version:
PHP 5.5.14 (cli)
openssl version:
OpenSSL 1.0.1i 6 Aug 2014

Reproduce:
config this example and run private.php on apache+php

I find that in .gitignore there is a unresolved conflict. Kidding?

In the file XeroOAuth.php, line 446
if ($this->response ['code'] == 401 && isset ( $this->config ['session_handle'] )) {

What is the point of the isset ( $this->config ['session_handle'] ) test?

I am getting a 401 response for expired token, but it is skipping setting the helper to TokenExpired because i do not have a session_handle set

Can you please confirm that your official API works with your API so people don't have to test SHA-2 specifically.

In lines https://github.com/XeroAPI/XeroOAuth-PHP/blob/master/lib/XeroOAuth.php#L388-434

Because $params isn't set (if it's a POST request $params['xml'] is set) the try statement fails. This is because array_merge on https://github.com/XeroAPI/XeroOAuth-PHP/blob/master/lib/XeroOAuth.php#L429 is trying to merge an empty $params instead of an array.

It looks like you recently changed this because all I did was make 'useauth' part of $params again and it fixed it on https://github.com/XeroAPI/XeroOAuth-PHP/blob/master/lib/XeroOAuth.php#L389

There is a known issue with some platforms (specifically AWS) that makes this library slow. Discussed here:

https://forums.aws.amazon.com/thread.jspa?messageID=638216

This can be overcome by adding CURLOPT_IPRESOLVE => CURL_IPRESOLVE_V4 in the connection options, but clearly that isn't desirable for everyone.

Some way to optionally disable this in the constructor config might be nice.

Ultimately this is more a fault of the API itself, but it would be helpful if the library converted these dates to ISO format for us.

Has been an ongoing issue in the forums for 4+ (!!!!!) years now

An easy solution would only have to be a few lines of code (referenced from here):

preg_match('~(\d+)\d{3}((?:\+|-)\d+)~',  $date, $match);
$dt = new DateTime('@' . $match[1]);
$dt = new DateTime($dt->format('Y-m-d H:i:s') . ' ' . $match[2]);
$date = strtotime($dt->format('r'));

@ronanq Is there any chance the OAuthSimple library is going to be updated to use the newer __construct constructor standard for PHP7?

Actually i want to retieve the Profit and Loss report.it all goes fine until i get an alphanumeric code that is suggested to input into the Xero on AppHarbor url,but when i go back,it neither returns to AppHarbor home page nor to any other page demanding for any code.

So please help me where to input this code and use it to retrieve the P/L report.
Hope for a better response.

Thanks again,

After authenticating with a public application (after directed to API.XERO.COM for authentication (30m period), I'm receiving:
Notice: Undefined index: session_handle in /var/www/html/XeroOAuth-PHP/tests/testRunner.php on line 98

On page: /XeroOAuth-PHP/public.php

Hi

I got a problem when testing.

http://salnan.com/xero/public.php

For 1st time it work ok when i test Organization. But after i close my windows, and then open again, it say

Error: Curl error: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Any solution for this. I dont update any code from your server, Only consumer_key , shared_secret, and also OAUTH_CALLBACK

Thank You
Salnan

Hi Guys,

I am querying contact end point but i am not receiving contactpersons details as i do receive in API Previewer.

Also how can i query based on UpdatedDateUTC field in PHP API?

Class XeroOAuth expects arguments access_token and access_token_secret, while class OAuthSimple expects consumer_key and shared_secret. This must be tidied up, the examples are confusing enough without this "renaming" through the code.

Hi,
I am using PHP library to access Xero API's and when trying to refresh API tokens I am getting the following error,
"Curl error: Unknown SSL protocol error in connection to api-partner.network.xero.com:443".
It's not happening for all request, but for few.
Can you please let me know how it can be fixed. Below is the complete response,

REQUEST API URL:
https://api-partner.network.xero.com/oauth/AccessToken

RESPONSE CODE:1

RESPONSE:
https://gist.github.com/chethank/af642cdd5379a5eb9119

Thanks
Chethan K

I use $XeroOAuth->request() to send requests to Xero.

When trying to send an Invoice with a + character in item Description element (actually, this error was triggered if a plus character was present in any element), I was getting a weird error:

oauth_problem=signature_invalid&oauth_problem_advice=Failed%20to%20validate%20signature

(Failed to validate signature)

It looks like the problem is here:
https://github.com/XeroAPI/XeroOAuth-PHP/blob/0d2578/lib/XeroOAuth.php#L278

Adding rawurlencode() did the trick for me:
$this->request_params['xml'] = rawurlencode($this->xml);

Hello,

I'm trying to find examples on how to pull the Bank Statement from the Reports where I have start date, end date and the amount of the transactions (if possible).

Can't find anywhere... I can only find examples of the same stuff... payrolls, contacts...

Could you please point me into the right direction?

Thank you so much!
Kitara

Do you have any plan to support Laravel, so that we can publish the config file?

Thank you!

Is it possible to add a ?where statement as an example to this? as there is no example in the "example".

if (isset($_REQUEST['users'])) {
        $response = $XeroOAuth->request('GET', $XeroOAuth->url('Users', 'core'), array('Where' => $_REQUEST['where']));
        if ($XeroOAuth->response['code'] == 200) {
            $users = $XeroOAuth->parseResponse($XeroOAuth->response['response'], $XeroOAuth->response['format']);
            echo "There are " . count($users->Users[0]). " users in this Xero organisation, the first one is: 
";
            pr($users->Users[0]->User);
        } else {
            outputError($XeroOAuth);
        }
    }

To get the user information after connecting with xero?

it returns below errors:

ContextErrorException: Notice: Undefined index: signed_url

looking at a line 264: you will see CURLOPT_URL => $this->sign['signed_url'],

where is the sign['signed_url'] from?????

think it's not implemented yet huh?

Please Can you help in adding the payment PUT Request on tests/test.php file. I have been having problems with this. I would like to change the status of an invoice to paid the custom gateway returns a successful payment of a invoice payment.

I tried to run a private application test using this library, and I'm getting the following error:

Curl error: SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

File ca-bundle.crt is in the correct location and it's loaded correctly, but the authentication fails anyway.

File XeroOAuth.php, line ~423

try {
    $this->sign = $oauthObject->sign ( array (
            'path' => $url,
            'action' => $method,
            'parameters' => array_merge ( $params, array (
                    'oauth_signature_method' => $this->config ['signature_method']
            ) ),
            'signatures' => $this->config
    ) );
}

catch ( Exception $e ) {
    $errorMessage = $e->getMessage ();
}

Exception is hidden, but it must not be. If the signature fails, the request fails with cryptic errors.

The package has to be registered on packagist for people to use it. This is very easy, just goto packagist.org and slick the Submit a Package button.

It is bad practice for people to run off your master branch since that could change and isn't guaranteed to be stable. When you add git tags like v1.0 it will be recognised as a release by both composer and Github. For each release in the future just add another tag thats appropriate for the version.

I normally set the Ca bundle path in php.ini and that can be the case with many other systems. The library tries to set ca bundle explicitly, which I dont think is a good idea.

In my opinion this configuration should be left for the users. They can either set the ca bundle in php.ini or have it somewhere else (outside the project) and specify via configuration.

Right now the library checks for BASE_PATH which itself is a bad idea, and tries to set ca bundle from certs directory which may not resolve in some configurations of autoloaders.

Hey guys, I followed the instruction to remove entrust certificates from our side where we removed the following lines from our config.

'curl_ssl_cert'  => realpath($this->erpParams['xero_curl_ssl_cert']),
'curl_ssl_password' => $this->erpParams['xero_curl_ssl_password'],
'curl_ssl_key' => realpath($this->erpParams['xero_curl_ssl_key']),

but then we got the error message
Curl error: unable to use client certificate (no key found or wrong pass phrase?)

Any Ideas?

In curlit() function, there is a method called that does not exist: safe_encode()

https://github.com/XeroAPI/XeroOAuth-PHP/blob/0d2578/lib/XeroOAuth.php#L212

I am trying to PUT a new Invoice however whenever I send the request I get the following error:

oauth_problem=signature_method_rejected&oauth_problem_advice=Private%20applications%20must%20use%20the%20RSA-SHA1%20signature%20method

The code I am using is as follows:

$xero->request('PUT', $xero->url('Invoices'), null, $request);

When I swap out the PUT for a POST it works correctly.

I noticed a difference in the URL when sending the two requests:

POST:

https://api.xero.com/api.xro/2.0/Invoices?oauth_consumer_key=TAP3V7SPYTCJ48G9TKBJ9EESJ2D5FI&oauth_nonce=RQHuL&oauth_signature=OG0IuuEw94T66Xmt%2BfMZDITrPONc%2FCj6Q1kArMR3a%2Bhl4Q2EN0Ofry42KIx0eyYJ4wGtFFLxa%2FqaIpz5bp5uEMpi52Lxoaa%2FAqbZKu7js7VrHstxvxSh1IB%2FUzdK2bzZDcgs0ZwngjWzWc%2BFe18RpnGUXHY9eSPL1v1vMUxXNLw%3D&oauth_signature_method=RSA-SHA1&oauth_timestamp=1390806595&oauth_token=TAP3V7SPYTCJ48G9TKBJ9EESJ2D5FI&oauth_version=1.0&order=

PUT:

https://api.xero.com/api.xro/2.0/Invoices?oauth_consumer_key=TAP3V7SPYTCJ48G9TKBJ9EESJ2D5FI&oauth_nonce=k20rN&oauth_signature=EYc2x6Hqd7QT74sWiM0cHGf5JzM%3D&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1390806630&oauth_token=TAP3V7SPYTCJ48G9TKBJ9EESJ2D5FI&oauth_version=1.0

Am I missing something from the config which would cause it to use HMAC over RSA-SHA1?

Thanks

I'm posting this here in case anyone else runs into the same issue or the developer decides to include two crt files.

I was getting the following error -
Error: Curl error: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

I found a solution at http://www.webmyriad.net/tips/xero-api/php-xero-api-getting-the-php-code-sample-working-for-private-applications?id=4403.

The extra step at the end fixed it for me -
Go to the following link https://github.com/bagder/ca-bundle/blob/e9175fec5d0c4d42de24ed6d84a06d504d5e5a09/ca-bundle.crt
Press the "raw" button, select all, copy and paste the contents into the file certs/ca-bundle.crt on your webserver/localhost you can replace the previous file.
Note, this is because the original ca-bundle.crt downloaded with the PHP example code is too new, you need an older version, see the following site http://curl.haxx.se/docs/caextract.html and notice the reference to "an older ca-bundle from github"

Hello

There's a bug in the codebase when you do 2 simultaneous requests - it isn't apparent in the test suite as this never happens.

e.g. make a GET request, then a POST request and you will be supplied with an oauth invalid signature error.

As a work around at the end of the "curlit" method I reset a few variables:

    $this->request_params = array();
    $this->params = array ();
    $this->headers = array ();
    $this->auto_fixed_time = false;
    $this->buffer = null;
    $this->xml = null;

After that everything works as expected.

Hope this helps someone else, as it had me knocking my head off a wall for a long time!

Ryan

I am unable to get json data to POST to Xero this this library. XML works fine but XML is a pain with special characters like &.

Maybe i am doing it wrong....

It doesn't really make sense to me to overwrite the passed config with defaults. Shouldn't it be the other way round as they are called 'defaults'? Would be useful to change the curl timeout for instance. I'm submitting a month's invoices in one call so it's timing out too early.

https://github.com/XeroAPI/XeroOAuth-PHP/blob/master/lib/XeroOAuth.php#L90

After add library to required

I see error

Could not find package xero/xerooauth-php at any version for your minimum-stability (stable). Check the package spelling or your minimum-stability

Actually i want to retieve the Profit and Loss report.it all goes fine until i get an alphanumeric code that is suggested to input into the Xero on AppHarbor url,but when i go back,it neither returns to AppHarbor home page nor to any other page demanding for any code.

So please help me where to input this code and use it to retrieve the P/L report.
Thanks ,

The php_self function returns http://<>:443 for an https domain which is rejected by apache.

If I change it to the following

I have worked around by forcing https and ignoring port.

"TokenExpired: This means that the access token has expired. If you are using a partner API type application, you can renew it automatically, or if using a public application, prompt the user to re-authenticate"
Where do I send user user to re-authenticate? Can you you explain? We don't really want xero to fight us same way QuickBooks do. But it appears to be the case.

Hi,

I am getting this code after authorization, but wondering now where to input this code to complete the authentication process.

Please see the attachment

I'm having problems with this library. I have traced this to the curl_exec call failing.

Unfortunately curl_error is returning a blank string so I really have no idea as to what is going wrong. This is very frustrating and don't know whether this is a PHP bug (am on Centos with PHP 5.4.16) or something else.

I will try and figure out why the error is blank and report back.