Amazon Selling Partner API - PHP SDK
This repository is not an official Amazon PHP library for their SP API.
Why next library?
There are already few php sp api SDKs available for PHP however most of them comes with many issues of auto generated code.
- hardcoded dependencies like
guzzlehttp/guzzle
oraws/aws-sdk-php
- legacy code base (7.2)
- no logger
- SDK's are oriented around single seller which is not suitable for bigger systems
- missing or lacking support for
client_credentials
grant type - not all API covered
- no extensions
This library goal is to resolve all above mentioned issues.
Installations
composer install amazon-php/sp-api-sdk^1.0
This library is not in a stable stage yet, please use with caution.
Available SDKs
SellingPartnerSDK - Facade for all SDK's
- APlusSDK
- AuthorizationSDK
- CatalogItemSDK
- FBAInboundSDK
- FBAInventorySDK
- FBASmallAndLightSDK
- FeedsSDK
- FinancesSDK
- FulfillmentOutboundSDK
- ListingsItemsSDK
- MessagingSDK
- NotificationsSDK
- OrdersSDK
- ProductFeesSDK
- ProductPricingSDK
- ProductTypesDefinitionsSDK
- ReportsSDK
- SalesSDK
- SellersSDK
- ServicesSDK
- ShipmentInvoicingSDK
- ShippingSDK
- SolicitationsSDK
- TokensSDK
- UploadsSDK
Authorization
In order to start using SP API you need to first register as a Developer and create application. Whole process is described in Amazon Official Guides.
Normally amazon recommends to use Role IAM when creating application however this requires and additional API call when obtaining refresh token. It's easier to use User IAM and just make sure that the user has following Inline Policy
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "execute-api:Invoke",
"Resource": "arn:aws:execute-api:*:*:*"
}
]
}
IAM User
Example of changing refresh token into access token.
<?php
use AmazonPHP\SellingPartner\OAuth;
use AmazonPHP\SellingPartner\Configuration;
use AmazonPHP\SellingPartner\HttpFactory;
$oauth = new OAuth(
$client,
$httpFactory = new HttpFactory($factory, $factory),
$config = Configuration::forIAMUser(
'lwaClientID',
'lwaClientID',
'awsAccessKey',
'awsSecretKey'
)
);
$accessToken = $oauth->exchangeRefreshToken('seller_oauth_refresh_token');
IAM Role
@TODO
Development
99% of code in this library is auto generated from Amazon Selling Partner API Models using OpenAPI Generator tool. Output is later automatically upgraded by RectorPHP to PHP 7.4 version and finally coding standards are also automatically unified by PHP CS Fixer.
Requirements:
In oder to regenerate code (for example when API definitions change), execute following code:
composer generate
Examples
<?php
use AmazonPHP\SellingPartner\Marketplace;
use AmazonPHP\SellingPartner\Regions;
use AmazonPHP\SellingPartner\SellingPartnerSDK;
use Buzz\Client\Curl;
use AmazonPHP\SellingPartner\Exception\ApiException;
use AmazonPHP\SellingPartner\Configuration;
use Monolog\Handler\StreamHandler;
use Monolog\Logger;
use Nyholm\Psr7\Factory\Psr17Factory;
require_once __DIR__ . '/vendor/autoload.php';
$factory = new Psr17Factory();
$client = new Curl($factory);
$configuration = Configuration::forIAMUser(
'lwaClientID',
'lwaClientID',
'awsAccessKey',
'awsSecretKey'
);
$logger = new Logger('name');
$logger->pushHandler(new StreamHandler(__DIR__ . '/sp-api-php.log', Logger::DEBUG));
$sdk = SellingPartnerSDK::create($client, $factory, $factory, $configuration, $logger);
$accessToken = $sdk->oAuth()->exchangeRefreshToken('seller_oauth_refresh_token');
try {
$item = $sdk->catalogItem()->getCatalogItem(
$accessToken,
Regions::NORTH_AMERICA,
$marketplaceId = Marketplace::US()->id(),
$asin = 'B07W13KJZC'
);
dump($item);
} catch (ApiException $exception) {
dump($exception->getMessage());
}
Logging
Default log level is set up to DEBUG, but it can be changed in configuration to any other level for all operations in all APIs or only for given operation in given API.
$configuration->setDefaultLogLevel(\Psr\Log\LogLevel::INFO);
Specific API's or only given operations can be also excluded from logging (for example APIs with PII or sensitive data).
$configuration->setLogLevel(CatalogItemSDK::API_NAME, CatalogItemSDK::OPERATION_GETCATALOGITEM, LogLevel::INFO);
$configuration->setSkipLogging(TokensSDK::API_NAME);
$configuration->setSkipLogging(AuthorizationSDK::API_NAME, AuthorizationSDK::OPERATION_GETAUTHORIZATIONCODE);
Finally, you can also ignore specific headers when logging http request/response. By default, configuration is set to ignore following sensitive authorization headers:
'authorization',
'x-amz-access-token',
'proxy-authorization',
'www-authenticate',
'proxy-authenticate',
you can also add your own ignored headers:
$configuration->loggingAddSkippedHeader('some-sensitive-key');
Extensions
Each SDK allows you to register custom extensions executed before and after sending API requests.
<?php
$configuration->registerExtension(new class implements \AmazonPHP\SellingPartner\Extension {
public function preRequest(string $api, string $operation, RequestInterface $request): void
{
echo "pre: " . $api . "::" . $operation . " " . $request->getUri() . "\n";
}
public function postRequest(string $api, string $operation, RequestInterface $request, ResponseInterface $response): void
{
echo "post: " . $api . "::" . $operation . " " . $request->getUri() . " "
. $response->getStatusCode() . " rate limit: " . implode(' ', $response->getHeader('x-amzn-RateLimit-Limit')) . "\n";
}
});