API issues

Is anyone else seeing issues appear recently with API integrations?

We are seeing problems with order creation. Initially the API started rejecting orders where any line item had unlimited stock set to true but stock level was 0 (0 stock shouldn't matter the product is set to unlimited). And now it has just started rejecting all order creation with the error AUTHORIZATION_ERROR. This is with API keys that have worked fine for over a year now, as well as new keys I have generated for testing which have order read and write permissions.

I have flagged this with support who say they have raised it with the engineering team, but no response other than that so I have no idea how long this is going to be an issue for.

For anyone interested: support has got back to me saying the endpoint has been locked down for security reasons. Waiting to hear how long we can expect that to be the case.

58 minutes ago, Matt_Shepherd said:

For anyone interested: support has got back to me saying the endpoint has been locked down for security reasons.

Is this only affecting posts to create orders for you? I ask because I am not experiencing any issues getting orders via the API.

On 7/19/2023 at 10:57 AM, paul2009 said:

Is this only affecting posts to create orders for you? I ask because I am not experiencing any issues getting orders via the API.

Yes this is just for order creation

Just to also add we are experiencing the same issue with order creation. It's happening across a number of independent sites. No change on our side. We've retried recycling API keys. It looks like order creation is failing across all SquareSpace stores for us. 

We've replicated by just trying to place via a CURL request to eliminate the possibility of a code regression and it still occurs. Even with full permissions on the API key. 

It's causing significant disruption to our merchants. 
 

{
    "type": "AUTHORIZATION_ERROR",
    "details": null,
    "message": "You are not authorized to do that.",
    "subtype": null,
    "contextId": "EGRESNIEPLIZAUSQUEYQ"
}

Is there any update on this? I just spent the past hour and half debugging why my authorization is suddenly not working only to find that others are having the issue. 

How does Squarespace lock down this endpoint and now tell anyone? This is crazy to me. Also causing significant disruption.

I have chased support again for an update. The lack of communication or ETA on what is a fairly significant production outage from a major company is quite astounding!