Invalid Signature

Hello everyone, i keep getting this response. It doesn't break my code but the image doesn't upload either.

{
message: "Invalid Signature 2a44d83d64194cbe4e75852fabaa8770e186d0b1. String to sign - 'folder=utility-app/uploads/profiles/&public_id=f6c209e4-660b-4b21-b626-031da4c3daa4&timestamp=1669971839'.",
name: 'Error',
http_code: 401
}

I'm using cloudinary in node, below is my actual code.

import * as Cloudinary from "cloudinary";

import config from "../utils/config.js";

// cloudinary config

Cloudinary.config({

cloud_name:config.cloudinary_cloud_name,

api_key:config.cloudinary_api_key,

// api_secret: config.cloudinary_api_secret,

api_secret:"<REMOVED>",

secure:true,

});

// cloudinary config

/////////////////////////

// Uploads an image file

/////////////////////////

const uploadImage = async (imagePath, public_id, folder) => {

// Use the uploaded file's name as the asset's public ID and

// allow overwriting the asset with new versions

constoptions = {

public_id:public_id,

folder:folder,

};

try {

// Upload the image

// const result = await cloudinary.uploader.upload(imagePath, options);

constresult = awaitCloudinary.v2.uploader.upload(imagePath, options);

console.log(result);

returnresult.public_id;

} catch (error) {

console.error(error);

}

};

export default uploadImage;

Then i call the exported function and pass this details into it after i get my file from multer saved in the local path of my app

// upload function

uploadImage(imagePath, public_id, folder);

please i need help with this

Stephen Doyle

December 02, 2022 10:22

Hi Vincent,

I've removed the API secret from your message, but now that you've exposed it in a public forum, you should create a new key immediately and deactivate the old one.

Regarding the error, when you're using one of our SDKs, the most likely explanations are that you haven't passed the correct API secret to the SDK for the cloud you're trying to upload to, or when we take the provided parameters to check the signature, something doesn't match.

Assuming the api secret is correct, the next thing I notice is that you have a trailing '/' on the folder name which isn't correct - does it work if you remove that?

Regards,

Stephen

Comments