{"action":"created","issue":{"url":"https://api.github.com/repos/calcinai/xero-php/issues/92","labels_url":"https://api.github.com/repos/calcinai/xero-php/issues/92/labels{/name}","comments_url":"https://api.github.com/repos/calcinai/xero-php/issues/92/comments","events_url":"https://api.github.com/repos/calcinai/xero-php/issues/92/events","html_url":"https://github.com/calcinai/xero-php/issues/92","id":106582942,"number":92,"title":"\"Failed to validate signature\" renewing tokens for partner application","user":{"login":"judgej","id":395934,"avatar_url":"https://avatars.githubusercontent.com/u/395934?v=3","gravatar_id":"","url":"https://api.github.com/users/judgej","html_url":"https://github.com/judgej","followers_url":"https://api.github.com/users/judgej/followers","following_url":"https://api.github.com/users/judgej/following{/other_user}","gists_url":"https://api.github.com/users/judgej/gists{/gist_id}","starred_url":"https://api.github.com/users/judgej/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/judgej/subscriptions","organizations_url":"https://api.github.com/users/judgej/orgs","repos_url":"https://api.github.com/users/judgej/repos","events_url":"https://api.github.com/users/judgej/events{/privacy}","received_events_url":"https://api.github.com/users/judgej/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-09-15T15:34:31Z","updated_at":"2015-09-17T00:46:42Z","closed_at":null,"body":"Been tearing my hair out all afternoon trying to get this working. Is there any way I can monitor what is being sent to Xero to see if there are any clues as to what could be going wrong?\r\n\r\n* I have the correct curl SSL certificates, since it can get through to the partner URL.\r\n* I have the correct consumer key and secret, since authorising at the start works. I get the initial 30 minute access tokens, and they work for access.\r\n* The RSA private key appears to be correct, and works on the production site (in a different application).\r\n\r\nAll these things seem to be set up correctly in the request (I've var-dumped the request and all the stuff I expect to see is in the correct place - except the callback URL which has a localhost domain, but the callback is not used when renewing tokens - or is it?), but when I `send()` the request to renew the tokens, I get this error from Xero:\r\n\r\n> Failed to validate signature\r\n\r\nThe support details on the Xero site seem to say, \"your code is messed up; use our code\", which is of no help whatsoever. I'm sure I am missing something really obvious, but how can I tell what it is?"},"comment":{"url":"https://api.github.com/repos/calcinai/xero-php/issues/comments/140934689","html_url":"https://github.com/calcinai/xero-php/issues/92#issuecomment-140934689","issue_url":"https://api.github.com/repos/calcinai/xero-php/issues/92","id":140934689,"user":{"login":"judgej","id":395934,"avatar_url":"https://avatars.githubusercontent.com/u/395934?v=3","gravatar_id":"","url":"https://api.github.com/users/judgej","html_url":"https://github.com/judgej","followers_url":"https://api.github.com/users/judgej/followers","following_url":"https://api.github.com/users/judgej/following{/other_user}","gists_url":"https://api.github.com/users/judgej/gists{/gist_id}","starred_url":"https://api.github.com/users/judgej/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/judgej/subscriptions","organizations_url":"https://api.github.com/users/judgej/orgs","repos_url":"https://api.github.com/users/judgej/repos","events_url":"https://api.github.com/users/judgej/events{/privacy}","received_events_url":"https://api.github.com/users/judgej/received_events","type":"User","site_admin":false},"created_at":"2015-09-17T00:46:42Z","updated_at":"2015-09-17T00:46:42Z","body":"I would recommend the example code is changed to sign in the query, until we get to the bottom of why the header approach doesn't work, at least for my setup and so likely others too."}}