You can share code PHP?

I also wrestled with this problem in PHP before finally finding that I had to include a trailing slash on the request URL. Annoying!

private string getCachedFile(string mp3ID, string origSearch)
{
DateTime epoch = new DateTime(1970, 1, 1, 0, 0, 0, 0);
TimeSpan span = DateTime.UtcNow – epoch;
int elapsed = (int)span.TotalSeconds;
string timestamp = Convert.ToString(elapsed);

HMACSHA1 hmac = new HMACSHA1();
hmac.Key = Encoding.UTF8.GetBytes(key);
string data = “/api/v0.2/music/cache/” + mp3ID + “/” + timestamp;
byte[] call = hmac.ComputeHash(Encoding.UTF8.GetBytes(data));
string sCall = BytesToHex(call);

string strResponse;

string variables = “Seeqpod_uid=” + uid + “&Seeqpod_call_signature=” + sCall + “&Seeqpod_timestamp=” + timestamp;
byte[] bytes = Encoding.ASCII.GetBytes(variables);

HttpWebRequest request = (HttpWebRequest)WebRequest.Create(“http://www.seeqpod.com/api/v0.2/music/cache/” + mp3ID);
request.Method = “POST”;
request.ContentType = “application/x-www-form-urlencoded”;
request.ContentLength = bytes.Length;

Stream os = request.GetRequestStream();
os.Write(bytes, 0, bytes.Length);
os.Close();

var response = request.GetResponse();

StreamReader readStream = new StreamReader(response.GetResponseStream());
strResponse = readStream.ReadToEnd();
readStream.Close();
response.Close();

return strResponse;
}

String uId = “37f4dc9c6e435a790f4ebeb882a90d668b159b5d”;
String apiK =”6fcfb11f176038e0934c2d3a05fb1fd854122c49″;
String timeStamp = String.valueOf(System.currentTimeMillis()/1000);
System.out.println(timeStamp);

String urlstr = “http://www.seeqpod.com/api/v0.2/music/search/”+this.titel+”/”+timeStamp;

// the url part for the hmac
String hmacstr = “/api/v0.2/music/search/”+this.titel+”/”+timeStamp;

url = new URL(urlstr);
System.out.println(timeStamp);

//hmac
String sCall = Signature.calculateRFC2104HMAC(hmacstr, apiK);
System.out.println(sCall);

HttpURLConnection conn = (HttpURLConnection) url.openConnection();
//add header infos
conn.setRequestProperty(“Seeqpod-uid”, uId);
conn.setRequestProperty(“Seeqpod-call-signature”, sCall);
conn.setRequestProperty(“Seeqpod-timestamp”, timeStamp);
conn.connect();
//http status code
System.out.println(conn.getResponseCode());

/print the response
BufferedReader in = new BufferedReader(
new InputStreamReader(
conn.getInputStream()));

String inputLine;

while ((inputLine = in.readLine()) != null)
System.out.println(inputLine);
in.close();

—————————————————————–
/// Generate the hmac sha-1 hex code
public static String calculateRFC2104HMAC(String data, String key)
throws java.security.SignatureException
{
String result;
try {

// get an hmac_sha1 key from the raw key bytes
SecretKeySpec signingKey = new SecretKeySpec(key.getBytes(), HMAC_SHA1_ALGORITHM);

// get an hmac_sha1 Mac instance and initialize with the signing key
Mac mac = Mac.getInstance(HMAC_SHA1_ALGORITHM);
mac.init(signingKey);

//compute the hmac on input data bytes
byte[] rawHmac = mac.doFinal(data.getBytes());

// base16-encode the hmac
result = Encoding.getHexString(rawHmac);
System.out.println(Encoding.EncodeBase16(rawHmac));

} catch (Exception e) {
throw new SignatureException(“Failed to generate HMAC : ” + e.getMessage());
}
return result;
}

———————————————————–
//// byte[] to HEX string
public static String getHexString(byte[] b){
String result = “”;
for (int i=0; i < b.length; i++) {
result +=
Integer.toString( ( b[i] & 0xff ) + 0×100, 16).substring( 1 );
}
return result;
}

///———————————————————-

/* *** another way to generate the hex
private static final char[] kDigits = { ’0′, ’1′, ’2′, ’3′, ’4′, ’5′, ’6′, ’7′, ’8′, ’9′, ‘a’,
‘b’, ‘c’, ‘d’, ‘e’, ‘f’ };

public static char[] bytesToHex(byte[] raw) {
int length = raw.length;
char[] hex = new char[length * 2];
for (int i = 0; i > 4;
int lowIndex = value & 0x0f;
hex[i * 2 + 0] = kDigits[highIndex];
hex[i * 2 + 1] = kDigits[lowIndex];
}
return hex;
}
*/

——————————-
The error response i got was:
mismatched call signature

any ideas?

greets jonas

btw: sry 4 my bad english xD

Jeremy – it sounds like something is funky with your timestamp/hashing. Can you post a little code or something?

Yuval – can you elaborate on this pay model?
I haven’t heard about it. Seeqpod did file chapter 11 today, but I read its more for asset protection than closing the doors.

Jason

so here’s how i’ve been testing. i went ahead to the seeqpod website with firefox (LiveHTTP Headers plugin installed) and did a search/play that needed to grab a cached file (via HTTP POST):
http://www.seeqpod.com/api/v0.2/music/cache/000c16f1bc9b3aaca06c1d81af6794f770891a9f

…where that long code is the mp3_url_id.

the HTTP POST data from “Live HTTP Headers” showed the following variables:
Seeqpod%5Fcall%5Fsignature=b87c1b8ea4530e45dc4309b8b25a53c7d19bbfc9&Seeqpod%5Fuid=69c976acce988bb343f1a90fa299856b2d65dc34&Seeqpod%5Ftimestamp=1238540522&random=G8pGs1Lrn

from that, i extracted the timestamp and call signature… ran the HMAC code with my appID and Jason’s example… but can clearly see why seeqpod is telling me the signatures don’t match. i’m guessing we just have the hash computing data wrong. i’m pretty sure %5F is the code for an underscore, but that doesn’t seem to matter, cause i can’t even get the call signatures in my HMAC to match with the hardcoded timestamp.

hope that makes any sense.

if you’re unsure of the reason for getting the cached file, you may at one time run into an issue where either the mp3 won’t play at all OR you’ll get some other weird mp3 play (i.e. my latest one being some windows system startup sound).

Contact me at http://twitter.com/yuvalkesten or here on this blog