Websockets invalid API Key from python

richrich · October 8, 2023, 4:06pm

Hi my websocket python app started failing when authentication was made mandatory - looks like back in august.
I’ve updated the websockets code to send passphrase, key, timestamp and signature but i get back error “Invalid API Key”

After getting passphrase and apisecret from coinbase my subscribe request looks like :

websocket.send(
{“type”: “subscribe”, “product_ids”: [“BTC-USD”], “channels”: [“level2”,“matches”] , “signature”:“35991371b21eac9cac3a6eef29a1c7fe”, “key”:“XXX-copied-from-secret-key-XXXX”, “passphrase”:“9sjzmhgl6tc”, “timestamp”:“1696780578” } )

I am very unsure where to get the signature from i copied it from the api key display (??!!)
is my format wrong ? or is the field content wrong.
many thanks,

muktupavels · October 8, 2023, 4:36pm

Advanced Trade does not have passphrase! Are you using Coinbase Pro APIs?

richrich · October 8, 2023, 5:00pm

hey thanks for the reply !
i’m using pro websocket e.g. url : wss://ws-feed.pro.coinbase.com
the cb docs suggests passphrase is required :

muktupavels · October 8, 2023, 5:08pm

You need to generate signature same way you do with REST API. For websocket you generate signature for /users/self/verify GET request.

Also you should not use secret as your key in request!

richrich · October 8, 2023, 5:56pm

I’ve switched to the advance api websocket because the authentication fields look a lot simpler, however, i still get an error. starting with subcription message with the non auth fields in i have this function which sets the right tags (api_key, passphrase, timestamp) but still yield authentication error :

def addAuth( subscription , symbol ):
subMsg = loads(subscription)
subMsg[‘api_key’] = KEY
timestamp = str(int(dt.datetime.now().timestamp()))
subMsg[‘timestamp’] = timestamp
phrase = ‘{}level2{}’.format(timestamp, symbol)
signature = hmac.new(bytes(APISECRET,‘utf-8’), phrase.encode(), hashlib.sha256 ).hexdigest()
subMsg[‘signature’] = signature
return json.dumps(subMsg)

muktupavels · October 8, 2023, 6:03pm

I will repeat - Advanced Trade API does not have passphrase!

If you want to use Advanced Trade you need to generate new API key in https://www.coinbase.com/settings/api.

Coinbase Pro API keys won’t work with Advanced Trade APIs! Same is true in other direction.

richrich · October 8, 2023, 7:41pm

ok thanks @muktapavels.
I’m not sure how to get advanced keys so i switched back to ws-feed-pro and found this :

github.com

danpaquin/coinbasepro-python/blob/master/cbpro/cbpro_auth.py

import hmac
import hashlib
import time
import base64
from requests.auth import AuthBase


class CBProAuth(AuthBase):
    # Provided by CBPro: https://docs.pro.coinbase.com/#signing-a-message
    def __init__(self, api_key, secret_key, passphrase):
        self.api_key = api_key
        self.secret_key = secret_key
        self.passphrase = passphrase

    def __call__(self, request):
        timestamp = str(time.time())
        message = ''.join([timestamp, request.method,
                           request.path_url, (request.body or '')])
        request.headers.update(get_auth_headers(timestamp, message,
                                                self.api_key,

This file has been truncated. show original

which worked !
cheers.

fourarms · October 23, 2023, 6:47am

this may be a dumb question, but whenever I click generate a new api key, it doesn’t give me any option to choose which type of API, it just says:

New API Key
If you’re an application developer creating apps for others, please use OAuth2.

Accounts
Primary accounts are highlighted with

all
BTC Wallet Cash (USD)LTC Wallet ETH2 Wallet
USDT Wallet ETC Wallet XLM Wallet XRP Wallet
ETH Wallet Permissions

Documentation for the Coinbase API can be found here.
wallet:accounts:createwallet:accounts:delete
wallet:accounts:readwallet:accounts:update
wallet:addresses:createwallet:addresses:read
wallet:buys:createwallet:buys:read
wallet:checkouts:createwallet:checkouts:read
wallet:contacts:readwallet:deposits:create
wallet:deposits:readwallet:notifications:read
wallet:orders:createwallet:orders:read
wallet:orders:refundwallet:payment-methods:delete
wallet:payment-methods:limitswallet:payment-methods:read
wallet:sells:createwallet:sells:read
wallet:supported-assets:readwallet:trades:create
wallet:trades:readwallet:transactions:read
wallet:transactions:requestwallet:transactions:send
wallet:transactions:transferwallet:user:email
wallet:user:readwallet:user:update
wallet:withdrawals:createwallet:withdrawals:read
Select all | Select none

Notifications
Notification URL:
Webhook for notifications (optional). For more information, see our documentation
Security settings

Allowed IP Addresses:
See examples. Leave blank to allow all IPs.
CancelCreate

it doesn’t ask “pro, exchange, or advanced”.
Or am I understanding your question wrong?

muktupavels · October 23, 2023, 8:50am

API key generated in https://www.coinbase.com/settings/api is for Advanced Trade and/or Sign in with Coinbase.

For Coinbase Pro you need to use Coinbase Pro | Digital Asset Exchange.

cpjenkins99 · December 1, 2023, 2:24pm

Is the Coinbase Pro API still alive? I used to subscribe to it, and tried to bring it up recently. Also, all of my assets there were transferred to Coinbase proper this past March. Any good examples for python to authenticate cleanly to the Advanced Trade API?

muktupavels · December 1, 2023, 2:30pm

Some APIs still work.

cpjenkins99 · December 1, 2023, 2:55pm

can you manage keys?

muktupavels · December 1, 2023, 2:59pm

I think there was no API to manage keys. If you mean if I can do that via web then no - I can no longer login and last time I checked it was possible only to create view only key anyway.

Topic		Replies	Views
Why I still get 'authentication failure' in Coinbase websocket feed? Advanced Trade API	10	1022	January 10, 2023
Websocket WORKING CODE for Coinbase Advanced Trade Advanced Trade API 12-hrs	6	684	October 11, 2023
Websocket Ticker Authentication Error (python) Advanced Trade API	2	533	January 19, 2023
Websocket Subscribe Authentication Error Advanced Trade API	5	494	March 4, 2024
Error 403: when connecting to the Advanced Trade websocket using example code Advanced Trade API	9	1032	March 21, 2023

Websockets invalid API Key from python

Related Topics