Secret Key being used in URLs

[andrewwatson]

I created an API Key (https://www.twilio.com/docs/api/rest/keys) and tried to use it with twilio-go and I keep getting authentication failures.

[kevinburke]

hey! looking now...

[andrewwatson]

I have a fix in my fork...

[andrewwatson]

andrewwatson@64e118f

[kevinburke]

Can you share the code you're using and the error you're getting? It should be something like

client := twilio.NewClient("SK123", "auth_token", nil)
client.Messages.SendMessage(...)

If you use the secret SK key in place of the account sid, it should be fine, I think. I'm reluctant to add a new parameter if they're both just strings.

[andrewwatson]

I tried using the key instead but it uses that account ID in other places, like in the URIs of resources so it was breaking downstream.

[kevinburke]

Ohhhhh, crap, okay. Let me think about this.

[kevinburke]

I just pushed version 0.58 to https://github.com/kevinburke/twilio-go which fixes this problem.

client := twilio.NewClient("AC123", "123", nil)
client.UseSecretKey("SK123")
client.Messages.SendMessage("123", "456", "Sending with secret key...", nil)

Unfortunately that version of the library expects you to have a "context" package in the standard library, which isn't currently supported on App Engine, unless you're using AE Flex. You can just grab the patch if you want: kevinburke@6ee7bc6

I'll send you an email with some ideas.