Authorization Error

[Ripnrip]

Hey team, thank you so much for first creating this wrapper, it's super useful.

After i try getting orders i am hit with this error:
sp_api.auth.exceptions.AuthorizationError: ('invalid_client', 'Client authentication failed', 401)

Let me know if this has been discussed before or if anything seems to be wrong here

Here is my source code

from dataclasses import dataclass, asdict
from datetime import date
from typing import List

import gspread
from oauth2client.service_account import ServiceAccountCredentials
from sp_api.api import Orders
from sp_api.base import SellingApiException, Marketplaces

import const


class GoogleSheets: 
    def __init__(self, credentials_file: str, sheet_key: str, worksheet_name: str):
        self.credentials_file = credentials_file
        self.sheet_key = sheet_key
        self.worksheet_name = worksheet_name
        self.scope = [
            "https://spreadsheets.google.com/feeds",
        ]
        self.sheet_object = self._get_sheet_object()

    def _get_sheet_object(self) -> gspread.Worksheet:
        credentials = ServiceAccountCredentials.from_json_keyfile_name(
            self.credentials_file, self.scope
        )
        client = gspread.authorize(credentials)
        return client.open_by_key(self.sheet_key).worksheet(self.worksheet_name)

    def write_header_if_doesnt_exist(self, columns: List[str]) -> None:
        data = self.sheet_object.get_all_values()
        if not data:
            self.sheet_object.insert_row(columns)

    def append_rows(self, rows: List[List]) -> None:
        last_row_number = len(self.sheet_object.col_values(1)) + 1
        self.sheet_object.insert_rows(rows, last_row_number)


@dataclass
class AmazonOrder:
    order_id: str
    purchase_date: str
    order_status: str
    order_total: str
    payment_method: str
    marketplace_id: str
    shipment_service_level_category: str
    order_type: str


HEADER = [
    "AmazonOrderId",
    "PurchaseDate",
    "OrderStatus",
    "OrderTotal",
    "PaymentMethod",
    "MarketplaceId",
    "ShipmentServiceLevelCategory",
    "OrderType",
]

#todo: add a mapping from amazon - sams club sku


class AmazonScript:
    def __init__(self):
        #google_sheets = GoogleSheets(
        #    "keys.json", const.GOOGLE_SHEETS_ID, const.GOOGLE_WORKSHEET_NAME
        #)
        google_sheets = GoogleSheets(
            "keys.json", "1IpqineCulYy4SK9IViCGiqAVjOoRmDPmvW0pYvxT9pg", "Orders"
        )
        google_sheets.write_header_if_doesnt_exist(HEADER)
        self.get_orders_data_and_append_to_gs(google_sheets)

    def get_orders_data_and_append_to_gs(self, google_sheets: GoogleSheets) -> None:
        try:
            order_data = self.get_orders_from_sp_api()
            ready_rows = [list(asdict(row).values()) for row in order_data]
            google_sheets.append_rows(ready_rows)
        except SellingApiException as e:
            print(f"Error: {e}")

    def get_orders_from_sp_api(self) -> List[AmazonOrder]:
        client_config = dict(
            refresh_token=const.REFRESH_TOKEN,
            lwa_app_id=const.LWA_APP_ID,
            lwa_client_secret=const.CLIENT_SECRET,
            aws_secret_key=const.AWS_SECRET_KEY,
            aws_access_key=const.AWS_ACCESS_KEY,
            role_arn=const.ROLE_ARN,
        )

        res = Orders(credentials=client_config, marketplace=Marketplaces.IT)
        return self.convert_response_to_amazon_order_list(
            res.get_orders(CreatedAfter='2017-03-30', CreatedBefore=date.today().isoformat()).payload
        )

    @staticmethod
    def convert_response_to_amazon_order_list(
            response_payload: dict
    ) -> List[AmazonOrder]:
        amazon_order_list = []
        for item in response_payload.get("Orders"):
            amazon_order_list.append(
                AmazonOrder(
                    order_id=item.get("AmazonOrderId", ''),
                    purchase_date=item.get("PurchaseDate", ''),
                    order_status=item.get("OrderStatus", ''),
                    order_total=item.get("OrderTotal", {}).get("Amount", ""),
                    payment_method=item.get("PaymentMethod", ''),
                    marketplace_id=item.get("MarketplaceId", ''),
                    shipment_service_level_category=item.get("ShipmentServiceLevelCategory", ''),
                    order_type=item.get("OrderType", ''),
                )
            )
        return amazon_order_list


if __name__ == '__main__':
    print("Start script.")
    am = AmazonScript()
    print("Done.")

[saleweaver]

Did you assign STS permissions to the user or the role? If it's the user, please remove 'role_arn' from the credentials

[saleweaver]

I've deleted the image, don't share something like this publicly...

The role_arn is one of your client_config dict properties, in your code. Delete it!

client_config = dict(
          refresh_token=const.REFRESH_TOKEN,
        lwa_app_id=const.LWA_APP_ID,
        lwa_client_secret=const.CLIENT_SECRET,
        aws_secret_key=const.AWS_SECRET_KEY,
        aws_access_key=const.AWS_ACCESS_KEY,
        
    )

[Ripnrip]

ah got it, thank you; let me try that

[Ripnrip]

just curious: is there a postman API where we can test if the API credential are working before using this python wrapper?

[Ripnrip]

I see a KeyError

Traceback (most recent call last):
  File "/usr/local/lib/python3.9/site-packages/cachetools/__init__.py", line 66, in __getitem__
    return self.__data[key]
KeyError: 'access_token_*************************'

could this be caching the older values?

[saleweaver]

No. If that error occurs, something with your setup is off. Most people have solved this by redoing the steps described in Amazon's repo.

[Ripnrip]

hey it was my arn user/role, so simple, thank you so much for insight here!

[Ripnrip]

hey it was my arn user/role, so simple, thank you so much for insight here!

[saleweaver]

I have just updated the docs to include this, sorry for the inconvenience. Amazon has changed their docs on how to create the users/roles some time ago...

[rashedoz]

@Ripnrip Can you kindly tell me how you managed to solve it? I am also stuck with this error. I followed the latest doc from Amazon but got this error. I tried using IAM user ARN and Role ARN both.

[Ripnrip]

@rashedoz So there wasn't anything necessary to "solve"; I was using the wrong ARN use/role, and had to switch to the correct one on the account. I had to get help from a freelancer on Fiver to point some things out to me; good usage of $60. I can pass along his info if you'd like; I forgot the exact nuance for what i needed to replace, but def try to tinker with the Role/ARN first

[rashedoz]

@Ripnrip thanks for the suggestions. Actually, i figured that out later. Was a silly mistake. I was using the wrong APP ID from the Merchant app.

[MichaelLan]

I have the same problem, on my local works but on a docker image it does not work, the error it's the same (a KeyError), all the variable environments are exported.

Traceback (most recent call last):
  File "/usr/local/lib/python3.8/site-packages/cachetools/__init__.py", line 66, in __getitem__
    return self.__data[key]
KeyError: 'access_token_********************************'

Any idea? @saleweaver

[saleweaver]

It shouldn't be a problem in docker, works for me. Are you using the variables from here: https://sp-api-docs.saleweaver.com/env_variables/?