Hi, I'm trying to certify alexa's ability but it marks errors in my endpoint that I can't correct:
The skill end-point is not validating the signatures for incoming requests and is accepting requests with an incorrect certificate URL.
My skill is developed in laravel - Framework Botman Studio and instead of ngrok I use Heroku. My domain is in Godaddy, it already has SSL certificate. Use Expedited SSL to certify my domain with SSL.
You have to verify and only allow requests that come from alexa in your server. If you would use official sdk, it would do that for you, but because you're using php, you have to do it yourself. I don't have an exact example, how to do it, because I use ask-sdk, but this link might help you with the problem at hand: documentation.
I have the same issues.
On first run of certification I had 4 fix required because I forgot to implement signature/timestamp verification. So I have fixed the issue and installed it but nothing is changed. Despite my webservice return 400 BAD request, Alexa certification highlight the same 4 fix.
Any suggestion?
I saw other threads in the forum but nobody is able to answer
3 People are following this question.
