-
Notifications
You must be signed in to change notification settings - Fork 37
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Updated with support for Etsy API v3.
Removed all supported for Etsy API v2.
- Loading branch information
Showing
45 changed files
with
1,046 additions
and
1,786 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,7 @@ | ||
# Changelog | ||
|
||
## v0.1 | ||
First actual version. | ||
|
||
* Added support for the Etsy API v3. | ||
* Removed support for Etsy API v2 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,74 +1,151 @@ | ||
# Etsy PHP SDK | ||
An unofficial PHP SDK for the Etsy API. | ||
An unofficial PHP SDK for the Etsy API v3. | ||
|
||
This package is still in development. It is not stable to directly use. | ||
This package is still in development. **Listing Management** resources are currently not available. | ||
|
||
## Requirements | ||
PHP 5.6.0 or greater. | ||
PHP 7.0 or greater. | ||
|
||
## Install | ||
Install the package using composer. | ||
```php | ||
composer require rhysnhall/etsy-php-sdk | ||
``` | ||
|
||
Include the OAuth client and Etsy class. | ||
```php | ||
use Etsy\Etsy; | ||
use Etsy\OAuth\Client; | ||
``` | ||
|
||
## Usage | ||
|
||
### Authorizing your app | ||
The Etsy API uses OAuth 1.0 authentication. You can read more about authenticating with Etsy on their [documentation](https://www.etsy.com/developers/documentation/getting_started/oauth). | ||
The Etsy API uses OAuth 2.0 authentication. You can read more about authenticating with Etsy on their [documentation](https://developers.etsy.com/documentation/essentials/authentication). | ||
|
||
The first step in OAuth is to obtain temporary credentials. You will need an existing API consumer key and secret which you can obtain by registering an app [here](https://www.etsy.com/developers/register). | ||
The first step in OAuth2 is to request an OAuth token. You will need an existing App API key which you can obtained by registering an app [here](https://www.etsy.com/developers/register). | ||
```php | ||
Etsy::setConfig([ | ||
'consumer_key' => $consumer_key, | ||
'consumer_secret' => $consumer_secret | ||
]); | ||
$etsy = new Etsy; | ||
$client = new Etsy\OAuth\Client($api_key); | ||
``` | ||
|
||
Obtain the temporary credentials and save them. | ||
Generate a URL to redirect the user to authorize access to your app. | ||
```php | ||
$temp_credentials = $etsy->getTemporaryCredentials(); | ||
$url = $client->getAuthorizationUrl( | ||
$redirect_uri, | ||
$scopes, | ||
$code_challenge, | ||
$nonce | ||
); | ||
``` | ||
|
||
Generate a URL to redirect the user to authorize access to your app. | ||
###### Redirect URI | ||
You must set an authorized callback URL. Check out the [Etsy documentation](https://developers.etsy.com/documentation/essentials/authentication#redirect-uris) for further information. | ||
|
||
###### Scope | ||
Depending on your apps requirements, you will need to specify the [permission scopes](https://developers.etsy.com/documentation/essentials/authentication#scopes) you want to authorize access for. | ||
```php | ||
$redirect_url = $etsy->getAuthorizationUrl(); | ||
$scopes = ["listings_d", "listings_r", "listings_w", "profile_r"]; | ||
``` | ||
|
||
Depending on your apps requirements, you will need to specify the [permission scopes](https://www.etsy.com/developers/documentation/getting_started/oauth#section_permission_scopes) you want to authorize access for. This should be done when setting the config. You can use either an array or a string to define the scope. | ||
You can get all scopes, but it is generally recommended to only get what you need. | ||
```php | ||
$scopes = \Etsy\Utils\PermissionScopes::ALL_SCOPES; | ||
``` | ||
|
||
Additionally, you will most likely want to set a callback URL. | ||
###### Code challenge | ||
You'll need to generate a [PKCE code challenge](https://developers.etsy.com/documentation/essentials/authentication#proof-key-for-code-exchange-pkce) and save this along with the verifier used to generate the challenge. You are welcome to generate your own, or let the SDK do this for you. | ||
```php | ||
Etsy::setConfig([ | ||
'consumer_key' => $consumer_key, | ||
'consumer_secret' => $consumer_secret, | ||
'scope' => ['listings_r', 'transactions_r'], | ||
'callback_uri' => 'my-etsy-app/authorize' | ||
]); | ||
[$verifier, $code_challenge] = $client->generateChallengeCode(); | ||
``` | ||
|
||
You can get all scopes, but it is generally recommended to only get what you need. | ||
###### Nonce | ||
The nonce is a single use token used for CSRF protection. You can use any token you like but it is recommended to let the SDK generate one for you each time you authorize a user. Save this for verifying the response later on. | ||
```php | ||
\Etsy\Utils\PermissionScopes::ALL_SCOPES | ||
$nonce = $client->createNonce(); | ||
``` | ||
|
||
Upon successful authorization, the user will be redirected to your URL along with two query string parameters called **oauth_verifier** and **oauth_token**. | ||
|
||
You now only have a small window of time to complete the last step before the verifier expires. | ||
The URL will redirect your user to the Etsy authorization page. If the user grants access, Etsy will send back a request with an authorization code and the nonce (state). | ||
```curl | ||
https://www.example.com/some/location? | ||
code=bftcubu-wownsvftz5kowdmxnqtsuoikwqkha7_4na3igu1uy-ztu1bsken68xnw4spzum8larqbry6zsxnea4or9etuicpra5zi | ||
&state=superstate | ||
``` | ||
|
||
It is up to you to validate the nonce. If they do not match you should discard the response. | ||
|
||
To complete authorization, you will need to request OAuth token credentials. | ||
For more information on Etsy's response, check out the [documentation here](https://developers.etsy.com/documentation/essentials/authentication#step-2-grant-access). | ||
|
||
The final step is to get the access token for the user. To do this you will need to make a request using the code that was just returned by Etsy. You will also need to pass in the same callback URL as the first request and the verifier used to generate the PKCE code challenge. | ||
```php | ||
$token_credentials = $etsy->getTokenCredentials($temp_creds, $oauth_token, $oauth_verifier); | ||
[$access_token, $refresh_token] = $client->requestAccessToken( | ||
$redirect_uri, | ||
$code, | ||
$verifier | ||
); | ||
``` | ||
|
||
Save these credentials as they will remain valid until the they are revoked, and can be reused for the specific user moving forward. | ||
You'll be provided with both an access token and a refresh token. The access token has a valid duration of 3600 seconds (1 hour). Save both of these for late ruse. | ||
|
||
#### Refreshing your token | ||
|
||
You can refresh your authorization token using the refresh token that was previously provided. This will provide you with a new valid access token and another refresh token. | ||
|
||
The next time you set the Etsy config, include these access credentials to skip the need to repeat the above process. | ||
The config will also accept optional keys **user_id** and **shop_id**. | ||
```php | ||
Etsy::setConfig([ | ||
'consumer_key' => $consumer_key, | ||
'consumer_secret' => $consumer_secret, | ||
'access_key' => $access_key, | ||
'access_secret' => $access_secret, | ||
|
||
// Optional | ||
'user_id' => $user_id, | ||
'shop_id' => $shop_id | ||
[$access_token, $refresh_token] = $client->refreshAccessToken($refresh_token); | ||
``` | ||
|
||
The [Etsy documentation](https://developers.etsy.com/documentation/essentials/authentication#requesting-a-refresh-oauth-token) states that refreshed access tokens have a duration of 86400 seconds (24 hours) but on testing they appear to only remain valid for up 3600 seconds (1 hour). | ||
|
||
#### Exchanging legacy OAuth 1.0 token for OAuth 2.0 token | ||
If you previously used v2 of the Etsy API and still have valid authorization tokens for your users, you may swap these over for valid OAuth2 tokens. | ||
```php | ||
[$access_token, $refresh_token] = $client->exchangeLegacyToken($legacy_token); | ||
``` | ||
|
||
This will provide you with a brand new set of OAuth2 access and refresh tokens. | ||
|
||
### Basic use | ||
|
||
Create a new instance of the Etsy class using your App API key and a user's access token. | ||
|
||
```php | ||
$etsy = new Etsy\Etsy($api_key, $access_token); | ||
|
||
// Get user. | ||
$user = $etsy->getUser(); | ||
|
||
// Get shop. | ||
$shop = $user->getShop(); | ||
|
||
// Update shop. | ||
$shop->update([ | ||
'title' => 'My exciting shop!' | ||
]); | ||
``` | ||
|
||
###### Collections | ||
When there is more than one result a collection will be returned. | ||
```php | ||
$reviews = $shop->getReviews(); | ||
|
||
// Get first review. | ||
$first = $reviews->first(); | ||
|
||
// Get 100 results using pagination. | ||
foreach($reviews->paginate(100) as $review) { | ||
... | ||
} | ||
``` | ||
|
||
--- | ||
|
||
Full documentation will be available soon. Email [hello@rhyshall.com](mailto:hello@rhyshall.com) for any assistance. | ||
|
||
## Contributing | ||
Help improve this SDK by contributing. | ||
|
||
Before opening a pull request, please first discuss the proposed changes via Github issue or <a href="mailto:hello@rhyshall.com">email</a>. | ||
|
||
## License | ||
This project is licensed under the MIT License - see the [LICENSE](https://github.com/OrbitCSS/orbitcss/blob/master/LICENSE) file for details |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.