Spapi doc 2419 listingsitemsissueschange schema

.github/workflows/closing_inactive_issues.yml

@@ -0,0 +1,57 @@
+name: "Close stale issues"
+
+# Controls when the action will run.
+on:
+  schedule:
+    # Controls when the action will run: Minute (0-59) | Hour (0-23) | Day of the month (1-31) | Month (1-12 or JAN-DEC) | Day of the week (0-6 or SUN-SAT)
+    - cron: "30 18 * * *"
+
+jobs:
+  cleanup:
+    name: Stale issue job
+    runs-on: ubuntu-latest
+    steps:
+      - uses: aws-actions/stale-issue-cleanup@v4
+        with:
+
+          #Issue types to process ("issues", "pull_requests", or "issues,pull_requests")
+          issue-types: 'issues'
+          # Setting messages to an empty string will cause the automation to skip
+          # that category
+          # Implementing ancient issue closure only at the moment.
+          stale-issue-message: 'This is a very old issue that is probably not getting as much
+          attention as it deserves. 
+          We encourage you to check if this is still an issue after 
+          the latest release and if you find that this is still a problem, please feel free
+          to open a new issue and make a reference to this one.'
+          #ancient-issue-message: 'It looks like this issue has not been active for more than thirty days.
+          #In the absence of more information, we will be closing this issue soon.
+          #If you find that this is still a problem, please add a comment to prevent automatic closure, or
+          #if the issue is already closed please feel free to reopen it.'
+
+          # These labels are required
+          stale-issue-label: 'closing soon'
+          exempt-issue-labels: 'no auto-closure'
+          response-requested-label: 'answer required'
+
+          # Don't set closed-for-staleness label to skip closing very old issues
+          # regardless of label
+          closed-for-staleness-label: 'closed for inactivity'
+
+          # Issue timing. Setting ancient issues to 6 months and stale to 1 month with no activity.
+          # Issue will automatically close after 5 days of being marked as stale.
+          days-before-stale: 180
+          days-before-close: 5
+          days-before-ancient: 180
+
+          # If you don't want to mark an issue as being ancient based on a
+          # threshold of "upvotes", you can set this here. An "upvote" is
+          # the total number of +1, heart, hooray, and rocket reactions
+          # on an issue.
+          # Current threshold based off the minimum expected for a possible bug.
+          minimum-upvotes-to-exempt: 10
+
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          loglevel: DEBUG
+          # Set dry-run to true to not perform label or close actions.
+          #dry-run: true

README.md

@@ -1,14 +1,17 @@
 ## Selling Partner API Models
-This repository contains Swagger models for developers to use to create software to call Selling Partner APIs. Developers can use [swagger codegen](https://github.com/swagger-api/swagger-codegen) to generate client libraries from these models. Please refer to [selling-partner-api-docs](https://github.com/amzn/selling-partner-api-docs) for additional documentation and read the [Selling Partner Api Developer Guide](https://github.com/amzn/selling-partner-api-docs/blob/main/guides/developer-guide/SellingPartnerApiDeveloperGuide.md) for instructions to get started.
+This repository contains Swagger models for developers to use to create software to call Selling Partner APIs. Developers can use [swagger codegen](https://github.com/swagger-api/swagger-codegen) to generate client libraries from these models. Please refer to [selling-partner-api-docs](https://github.com/amzn/selling-partner-api-docs) for additional documentation and read the [Selling Partner API Developer Guide](https://github.com/amzn/selling-partner-api-docs/blob/main/guides/en-US/developer-guide/SellingPartnerApiDeveloperGuide.md) for instructions to get started.
 
 The [models directory](https://github.com/amzn/selling-partner-api-models/tree/main/models) contains all of the currently available Selling Partner API models.
 
 The [clients directory](https://github.com/amzn/selling-partner-api-models/tree/main/clients) contains a [Java library](https://github.com/amzn/selling-partner-api-models/tree/main/clients/sellingpartner-api-aa-java) and a [C# library](https://github.com/amzn/selling-partner-api-models/tree/main/clients/sellingpartner-api-aa-csharp) with mustache templates for use with [swagger-codegen](https://swagger.io/tools/swagger-codegen/) to generate client libraries with authentication and authorization functionality included. The templates are located in *resources/swagger-codegen*.
 
+The [schemas directory](https://github.com/amzn/selling-partner-api-models/tree/main/schemas) contains all of the currently available Selling Partner Api schemas.
+
 ## Security
 
 See [CONTRIBUTING](CONTRIBUTING.md#security-issue-notifications) for more information.
 
 ## License
 
 This project is licensed under the Apache-2.0 License.
+

clients/sample-code/DelegatedRestrictedDataTokenWorkflowForDelegatee.java

@@ -0,0 +1,81 @@
+package sampleCode;
+
+// Imports from the Selling Partner API (SP-API) Auth & Auth client library.
+import com.amazon.SellingPartnerAPIAA.AWSAuthenticationCredentials;
+import com.amazon.SellingPartnerAPIAA.AWSAuthenticationCredentialsProvider;
+import com.amazon.SellingPartnerAPIAA.AWSSigV4Signer;
+import com.squareup.okhttp.OkHttpClient;
+import com.squareup.okhttp.Request;
+import com.squareup.okhttp.RequestBody;
+import com.squareup.okhttp.Response;
+
+import java.io.IOException;
+
+public class DelegatedRestrictedDataTokenWorkflowForDelegatee {
+
+    // This represents a workflow for a simple use case. Other use cases can be implemented using similar patterns.
+    public static void main(String[] args) throws IOException {
+        // The values for method, path and restrictedDataToken should match the RDT request made by delegator and the response.
+        String method = "GET";
+        String path = "/orders/v0/orders/123-1234567-1234567";
+        String restrictedDataToken = "Atz.sprdt|AYABeKCs7hKXXXXXXXXXXXXXXXXXX...";
+
+        // Build, sign, and execute the request, specifying method, path, RDT, and RequestBody.
+        // Pass a RequestBody only if required by the restricted operation. The requestBody is not required in this example.
+        Response restrictedRequestResponse = buildAndExecuteDelegatedRestrictedRequest(method, path, restrictedDataToken, null);
+
+        // Check the restricted operation response status code and headers.
+        System.out.println(restrictedRequestResponse.code());
+        System.out.println(restrictedRequestResponse.headers());
+    }
+
+    // The SP-API endpoint.
+    private static final String sellingPartnerAPIEndpoint = "https://sellingpartnerapi-na.amazon.com";
+
+    // Configure the AWSAuthenticationCredentials object.
+    // If you registered your application using an IAM Role ARN, the AWSAuthenticationCredentials and AWSAuthenticationCredentialsProvider objects are required.
+    private static final AWSAuthenticationCredentials awsAuthenticationCredentials = AWSAuthenticationCredentials.builder()
+            // If you registered your application using an IAM Role ARN, use the AWS credentials of an IAM User that is linked to the IAM Role through the AWS Security Token Service policy.
+            // Or, if you registered your application using an IAM User ARN, use the AWS credentials of that IAM User. Be sure that the IAM User has the correct IAM policy attached.
+            .accessKeyId("aws_access_key")
+            .secretKey("aws_secret_key")
+            .region("aws_region")
+            .build();
+
+    // Configure the AWSAuthenticationCredentialsProvider object. This is only needed for applications registered using an IAM Role.
+    // If the application was registered using an IAM User, the AWSAuthenticationCredentialsProvider object should be removed.
+    private static final AWSAuthenticationCredentialsProvider awsAuthenticationCredentialsProvider = AWSAuthenticationCredentialsProvider.builder()
+            // The IAM Role must have the IAM policy attached as described in "Step 3. Create an IAM policy" in the SP-API Developer Guide.
+            .roleArn("arn:aws:iam::XXXXXXXXX:role/XXXXXXXXX")
+            .roleSessionName("session-name")
+            .build();
+
+    // An example of a helper method to build, sign, and execute a restricted operation, specifying RestrictedResource, (String) RDT, and RequestBody.
+    // Returns the restricted operation Response object.
+    private static Response buildAndExecuteDelegatedRestrictedRequest(String method, String path, String restrictedDataToken, RequestBody requestBody) throws IOException {
+        // Construct a request with the specified RestrictedResource, RDT, and RequestBody.
+        Request signedRequest = new Request.Builder()
+                .url(sellingPartnerAPIEndpoint + path)  // Define the URL for the request, based on the endpoint and restricted resource path.
+                .method(method, requestBody)  // Define the restricted resource method value, and requestBody, if required by the restricted operation.
+                .addHeader("x-amz-access-token", restrictedDataToken) // Sign the request with the RDT by adding it to the "x-amz-access-token" header.
+                .build(); // Build the request.
+
+        // Initiate an AWSSigV4Signer instance using your AWS credentials. This example is for an application registered using an AIM Role.
+        AWSSigV4Signer awsSigV4Signer = new AWSSigV4Signer(awsAuthenticationCredentials, awsAuthenticationCredentialsProvider);
+
+        /*
+        // Or, if the application was registered using an IAM User, use the following example:
+        AWSSigV4Signer awsSigV4Signer = new AWSSigV4Signer(awsAuthenticationCredentials);
+        */
+
+        // Sign the request with the AWSSigV4Signer.
+        signedRequest = awsSigV4Signer.sign(signedRequest);
+
+        // Execute the signed request.
+        OkHttpClient okHttpClient = new OkHttpClient();
+        Response response = okHttpClient.newCall(signedRequest).execute();
+
+        return response;
+    }
+
+}

clients/sample-code/DelegatedRestrictedDataTokenWorkflowForDelegator.java

@@ -0,0 +1,155 @@
+package sampleCode;
+
+// Imports from the Selling Partner API (SP-API) Auth & Auth client library.
+import com.amazon.SellingPartnerAPIAA.AWSAuthenticationCredentials;
+import com.amazon.SellingPartnerAPIAA.AWSAuthenticationCredentialsProvider;
+import com.amazon.SellingPartnerAPIAA.LWAAuthorizationCredentials;
+
+// Imports from the generated Tokens API client library.
+import io.swagger.client.ApiException;
+import io.swagger.client.api.TokensApi;
+import io.swagger.client.model.CreateRestrictedDataTokenRequest;
+import io.swagger.client.model.CreateRestrictedDataTokenResponse;
+import io.swagger.client.model.RestrictedResource;
+
+// Imports from the generated Tokens API client library dependencies.
+import java.io.IOException;
+import java.util.Arrays;
+import java.util.List;
+
+
+public class DelegatedRestrictedDataTokenWorkflowForDelegator {
+
+    public static void main(String[] args) throws IOException, ApiException {
+        // This method represents a workflow for a simple use case. More use cases can be defined using a similar pattern.
+        callDelegatedRestrictedOperationWorkflow();
+    }
+
+    // The SP-API endpoint.
+    private static final String sellingPartnerAPIEndpoint = "https://sellingpartnerapi-na.amazon.com";
+
+    // Declare a string variable for the Restricted Data Token (RDT).
+    private static String restrictedDataToken;
+
+    // Configure the LWAAuthorizationCredentials object.
+    private static final LWAAuthorizationCredentials lwaAuthorizationCredentials = LWAAuthorizationCredentials.builder()
+            .clientId("<application_client_id>")
+            .clientSecret("<application_client_secret>")
+            .refreshToken("Atzr|XXXXXXXXXXX")
+            .endpoint("https://api.amazon.com/auth/O2/token")
+            .build();
+
+    // Configure the AWSAuthenticationCredentials object.
+    // If you registered your application using an IAM Role ARN, the AWSAuthenticationCredentials and AWSAuthenticationCredentialsProvider objects are required.
+    private static final AWSAuthenticationCredentials awsAuthenticationCredentials = AWSAuthenticationCredentials.builder()
+            // If you registered your application using an IAM Role ARN, use the AWS credentials of an IAM User that is linked to the IAM Role through the AWS Security Token Service policy.
+            // Or, if you registered your application using an IAM User ARN, use the AWS credentials of that IAM User. Be sure that the IAM User has the correct IAM policy attached.
+            .accessKeyId("aws_access_key")
+            .secretKey("aws_secret_key")
+            .region("aws_region")
+            .build();
+
+    // Configure the AWSAuthenticationCredentialsProvider object. This is only needed for applications registered using an IAM Role.
+    // If the application was registered using an IAM User, the AWSAuthenticationCredentialsProvider object should be removed.
+    private static final AWSAuthenticationCredentialsProvider awsAuthenticationCredentialsProvider = AWSAuthenticationCredentialsProvider.builder()
+            // The IAM Role must have the IAM policy attached as described in "Step 3. Create an IAM policy" in the SP-API Developer Guide.
+            .roleArn("arn:aws:iam::XXXXXXXXX:role/XXXXXXXXX")
+            .roleSessionName("session-name")
+            .build();
+
+    // The SP-API Tokens API instance used to call the createRestrictedDataToken operation.
+    private static final TokensApi tokensApi = new TokensApi.Builder()
+            .awsAuthenticationCredentials(awsAuthenticationCredentials)
+            .awsAuthenticationCredentialsProvider(awsAuthenticationCredentialsProvider)  // If the application uses User ARN, this line is not needed. Remove it or pass a null value.
+            .lwaAuthorizationCredentials(lwaAuthorizationCredentials)
+            .endpoint(sellingPartnerAPIEndpoint)
+            .build();
+
+    // This method wraps the workflow to request an RDT and make a call to a restricted operation.
+    private static void callDelegatedRestrictedOperationWorkflow() throws IOException, ApiException {
+
+        // Define the target application to which access is being delegated.
+        final String targetApplication = "amzn1.sellerapps.app.target-application";
+
+        // Define the path for the restricted operation that requires an RDT.
+        final String resourcePath = "/orders/v0/orders/123-1234567-1234567";
+
+        // Define the dataElements to indicates the type of Personally Identifiable Information requested.
+        // This parameter is required only when getting an RDT for use with the getOrder, getOrders, or getOrderItems operation of the Orders API
+        final List<String> dataElements = Arrays.asList("buyerInfo","shippingAddress");
+
+        // Build the RestrictedResource object with the respective Method (MethodEnum from RestrictedResource class), Path and dataElements.
+        RestrictedResource resource = buildRestrictedResource(RestrictedResource.MethodEnum.GET, resourcePath, dataElements);
+
+        // Make a list of the RestrictedResource objects that will be included in the request to create the RDT.
+        List<RestrictedResource> resourceList = Arrays.asList(resource);
+
+        // Get a delegated RDT for a list of RestrictedResource objects for a target application.
+        restrictedDataToken = getDelegatedRestrictedDataToken(targetApplication, resourceList);
+
+        // Pass the delegated RDT to the targetApplication owner.
+        // Delegated party should build, sign, and execute the request.
+        // An RDT expires after 60 minutes.
+
+        // Below is a example of how the workflow would look when requesting an RDT for multiple restricted resources.
+        // You can specify a maximum of 50 restricted resources.
+        /*
+        // Define a path for each restricted operation that requires an RDT.
+        final String resourcePath1 = "/orders/v0/orders";
+        final String resourcePath2 = "/orders/v0/orders/123-7654321-1234567";
+        final String resourcePath3 = "/orders/v0/orders/123-1234567-7654321/items";
+        final String resourcePath4 = "/mfn/v0/shipments/FBA1234ABC5D";
+        // Define the dataElements to indicate the type of Personally Identifiable Information to be requested.
+        // This parameter is required only when getting an RDT for use with the getOrder, getOrders, or getOrderItems operation of the Orders API
+        final List<String> dataElements = Arrays.asList("buyerInfo","shippingAddress");
+        // Build each RestrictedResource object with the respective Method (MethodEnum from RestrictedResource class) and Path.
+        RestrictedResource resource1 = buildRestrictedResource(RestrictedResource.MethodEnum.GET, resourcePath1, dataElements);
+        RestrictedResource resource2 = buildRestrictedResource(RestrictedResource.MethodEnum.GET, resourcePath2, dataElements);
+        RestrictedResource resource3 = buildRestrictedResource(RestrictedResource.MethodEnum.GET, resourcePath3, dataElements);
+        RestrictedResource resource4 = buildRestrictedResource(RestrictedResource.MethodEnum.GET, resourcePath4);
+        // Make a list of the RestrictedResource objects that will be included in the request to create the RDT.
+        List<RestrictedResource> resourceList = Arrays.asList(resource1,resource2,resource3,resource4);
+        // Get a delegated RDT for a list of RestrictedResource objects for a target application.
+        restrictedDataToken = getDelegatedRestrictedDataToken(targetApplication, resourceList);
+        // Pass the delegated RDT to the targetApplication owner.
+        // If you request an RDT for multiple restricted resources; the delegated party should build, sign and execute each restricted operation separately.
+        // An RDT expires after 60 minutes.
+         */
+    }
+
+    // An example of a helper method for building RestrictedResource objects with dataElements parameters.
+    private static RestrictedResource buildRestrictedResource(RestrictedResource.MethodEnum method, String path, List<String> dataElements){
+        RestrictedResource resource = buildRestrictedResource(method,path);
+        resource.dataElements(dataElements);
+        return resource;
+    }
+
+    // An example of a helper method for building RestrictedResource objects, specifying the method (MethodEnum from RestrictedResource class) and path parameters.
+    private static RestrictedResource buildRestrictedResource(RestrictedResource.MethodEnum method, String path){
+        RestrictedResource resource = new RestrictedResource();
+        resource.setMethod(method);
+        resource.setPath(path);
+        return resource;
+    }
+
+    // An example of a helper method for creating a delegated RDT for a list of RestrictedResource objects for a target application.
+    private static String getDelegatedRestrictedDataToken(String targetApplication, List<RestrictedResource> resourceList) throws ApiException {
+        // Initialize a CreateRestrictedDataTokenRequest object that represents the Restricted Data Token request body.
+        CreateRestrictedDataTokenRequest restrictedDataTokenRequest = new CreateRestrictedDataTokenRequest();
+
+        // Set target application in the CreateRestrictedDataTokenRequest object
+        restrictedDataTokenRequest.setTargetApplication(targetApplication);
+
+        // Add a resource list to the CreateRestrictedDataTokenRequest object.
+        restrictedDataTokenRequest.setRestrictedResources(resourceList);
+
+        try {
+            CreateRestrictedDataTokenResponse response = tokensApi.createRestrictedDataToken(restrictedDataTokenRequest);
+            restrictedDataToken = response.getRestrictedDataToken();
+            return restrictedDataToken;
+        } catch (ApiException e) {
+            System.out.println(e.getResponseHeaders());  // Capture the response headers when a exception is thrown.
+            throw e;
+        }
+    }
+}