Shapeways: Bring your creativity to life in 3D

Re: Fatal error: Call to undefined function readline()

HexAirbot — 2013-06-20T02:17:01-00:00

Thanks Jonemo, figured it out.

Re: Fatal error: Call to undefined function readline()

jonemo — 2013-06-20T00:51:03-00:00

Are you running the script on a server or in a console? The readline() function is only available (and only makes sense) when running the command line interface (CLI) version of PHP. In addition to that, it is possible that your PHP installation simply doesn't have Readline included (for more info, see the documentation: http://php.net/manual/en/book.readline.php)

Fatal error: Call to undefined function readline()

HexAirbot — 2013-06-19T08:15:53-00:00

I use Centos. php 5.3.3

POST models/v1

Rafferty — 2013-06-18T11:16:23-00:00

Hi,

I'm using the POST modes/v1 API to upload a model.

The API documentation describes values of "price" and "basePrice" returned within the Material elements. However, all I am receiving for each material is {\"materialId\":6,\"markup\":0,\"isActive\":1}

Is there something I need to set to specify to get the price calculation. I am specifying a particular material - but am getting a long list of materials back (including the one I specify)..

Thanks in advance

Rafferty

POST models/v1

Rafferty — 2013-06-18T11:14:55-00:00

Mini assignment!! I need your help??

Daniel Watze — 2013-06-18T08:06:03-00:00

Dear Readers,

My name is Daniël and a product designer in the Netherlands (Eindhoven).

I made a product which I would like to personalize for every user.

For this mini assignment i need somebody who can write an app for me so people can personalize my 3d file.

Please sent me an e-mail if you are up for this challenge. If you live in the Netherlands please contact me per mail so we can make an appointment.

Already many thank,

Kind regards,

Daniël

Re: Ring Creator: Shapeway's app on the API

MrNibbles — 2013-06-16T04:57:02-00:00

Was this creator developed as an internal Shapeways tool by smart Shapeways employees or with third party tools and assistance (like Mixee Labs)?

If I had a clue as to what the referenced code does or how it's used to provide a great interactive tool I'd adapt it for use myself. But since I don't have a clue do you have any recommendations for how to approach this with minimal coding skills? Is there a "Shapeways API Use and Creators for Dummies" book?

On an unrelated note this creator seems rather limited because of discrete ring size steps and length limitations. Why not allow an option to enter numerical values for diameters, allow smaller diameters, and extend the length control to at least several inches? For example it could also be used to generate anything from small custom beads to larger custom containers like cigar tubes.

Barring these options I imagine it would be possible to download the generated file and rescale it or otherwise re-edit it to create other items but I noticed the files download in x3db file format. I believe this is a binary version of an x3d file but are there CAD applications that open both? Your compatibility chart for tools and file formats does not list the x3db format.

Re: /price/v1 bounding box parameters

jonemo — 2013-06-14T19:32:32-00:00

Ah, that makes sense! I assume though that the center point makes no difference in the price calculation, correct?

Continuing to work on this, I noticed that the information returned from /printers/v1 also includes the same parameters, for eample:

{"printerId":"1","title":"Somatech FDM","xBoundMin":"0.2500","xBoundMax":"25.0000","yBoundMin":"0.2500","yBoundMax":"25.0000","zBoundMin":"0.1000","zBoundMax":"30.0000"}

It appears that in these results the *BoundMax parameters alone define the max bounding box. Depending on the printer, the *BoundMin seems to be equal to the minimum wall thickness or the minimum Bounding Box dimensions (using the information on shapeways.com/materials as a reference). Can you clarify what exactly these return values mean?

In addition to that: Any chance you could include all design constraints (min wall thickness, min bounding box length, etc) in the info returned by the API?

Edit: One more thing: Why are the dimensions for the *BoundMax parameters in meters and for the *BoundMax return values centimeters?

Re: /price/v1 bounding box parameters

stonysmith — 2013-06-12T23:42:24-00:00

If you set xboundMin=0 and xboundMax=(width of your item) then it should work.

OR.... let's say your item was a 2mm cube centered around the point {100,100,100}
You could enter xboundMin=99 xboundMax=101

The min/max setting are designed to all you to run a loop across all the vertexes in your model and get the min/max values without having to try to center it on the origin.

/price/v1 bounding box parameters

jonemo — 2013-06-12T20:52:22-00:00

I'm a little confused about the meaning of the bounding box parameters of the price API endpoint: http://developers.shapeways.com/docs?li=dh_docs#POST_-price- v1

The (required) parameters are:
xBoundMin
xBoundMax
yBoundMin
yBoundMax
zBoundMin
zBoundMax

Through testing I have determined that the *Min and *Max parameters for each pair must be different, i.e. xBoundMin != xBoundMax.

The models for which I need to know the price all just have one bounding box. What is the meaning of these parameters in the context of requesting the price for one model?

Re: Convert Inventor Files

FreeRangeBrain — 2013-06-11T00:10:15-00:00

Yes. Export as an STL file from within Inventor. Just remember to pay attention to units when you upload to Shapeways.

Convert Inventor Files

Alexander7G — 2013-06-10T21:59:34-00:00

How do I convert the IPT-Files used by Autodesk Inventor 2012 to one of the file formats used by shape ways?
Is there a way to do this?

Re: Could we have OAuth 2.0 with generic access tokens?

jallwine — 2013-06-07T17:09:56-00:00

Alright, I found a chrome app called Postman which can do the OAuth signature calculations for quick debugging. I'm up and running! Thanks Hans

Re: Could we have OAuth 2.0 with generic access tokens?

jallwine — 2013-06-07T16:41:54-00:00

I think I'm just stuck in an OAuth 2.0 mindset. I'm used to just forming my own GET requests than I can easily test just by going to a given url in a browser or REST client. With OAuth 1.0 I guess I'm stuck using an OAuth client?

Re: Could we have OAuth 2.0 with generic access tokens?

hans.lambermont — 2013-06-07T16:39:13-00:00

Hi jallwine,

jallwine wrote on Fri, 07 June 2013 15:52

I'm not sure I follow what you're saying. If I sent you the access token that I just had generated and the consumer key of my app you would have complete access to the Shapeways API using my account. Don't I need to include both those in every request I make to the API in plain text?

No Here's why : The Consumer Key consists of a public part and a private part. Once myawesome3dprintsite.com has them it will never expose the private part to anyone. The Access Token also consist of a public part and a private part. Also for the Access Token once myawesome3dprintsite.com has them it will never expose the private part to anyone The private parts are only used to digitally sign the entire API request, that is it calculates a signature string of the API call with them and adds that signature string to the API call. So the private part of the Consumer Key and of the Access Token stay 'private' at myawesome3dprintsite.com . I hope this helps. If not feel free to ask new quesions

-- Hans

Re: Could we have OAuth 2.0 with generic access tokens?

jallwine — 2013-06-07T15:52:11-00:00

Re: Could we have OAuth 2.0 with generic access tokens?

hans.lambermont — 2013-06-07T15:46:19-00:00

jallwine wrote on Fri, 07 June 2013 15:38

Also, I understand that the private key is only transmitted once, but does the access token need to be sent every time?

The Access Token consists of a public/private keypair. Only the public key is transmitted on every API request, together with the public key part of the Consumer Key. The private key parts are used to digitally sign the API call and the Shapeways server validates the signature on every request.
This is in fact much like how SSL/TLS works.

-- Hans

Re: Could we have OAuth 2.0 with generic access tokens?

jallwine — 2013-06-07T15:40:33-00:00

Yes, thanks you! This will definitely get me started.

Re: Could we have OAuth 2.0 with generic access tokens?

hans.lambermont — 2013-06-07T15:38:17-00:00

Hi jallwine,

We're certainly looking into improving the security as well as the user and developer experience.
Adding a subset of OAuth-2 has always been an interesting option and I hope we do get to adding it.
The OAuth-1 generic Access Token procedure I described above should allow you to proceed. Right ?

-- Hans

Re: Could we have OAuth 2.0 with generic access tokens?

jallwine — 2013-06-07T15:38:08-00:00

Also, I understand that the private key is only transmitted once, but does the access token need to be sent every time? And the access token gives a lot of permissions to anyone with it. So ideally, that would be transmitted over SSL.

Re: Could we have OAuth 2.0 with generic access tokens?

jallwine — 2013-06-07T15:07:25-00:00

Hm, well I'm not all that concerned with the specifics. I've just used OAuth 2.0 in the past and it requires SSL. If you feel OAuth 1 is better, that's fine by me, but adding SSL would make me feel a lot better! Any idea when that might get rolled out?

Re: Could we have OAuth 2.0 with generic access tokens?

hans.lambermont — 2013-06-07T14:54:53-00:00

Hi jallwine,

That is correct. Though the private key parts of the Consumer Key and the Access Token are only transmitted once ever, and in your case only between Shapeways and myawesome3dprintsite.com . The RFC has this to say on the matter "the server MUST require the use of a transport-layer mechanisms such as TLS or Secure Socket Layer (SSL) (or a secure channel with equivalent protections)." Securing this is on my todo-list. Here's more on OAuth1 security -> http://tools.ietf.org/html/rfc5849#section-4

Btw, you might be interested to know that Oauth-2 is considered less secure than OAuth-1 by the former OAuth-2 lead author, see http://en.wikipedia.org/wiki/Oauth#Controversy

-- Hans

Re: Could we have OAuth 2.0 with generic access tokens?

jallwine — 2013-06-07T14:05:10-00:00

This seems like a security hole to me. Since the API isn't over SSL the access token and key is sent in plain text so then anyone who knows how to sniff packets could gain access.

Re: Could we have OAuth 2.0 with generic access tokens?

hans.lambermont — 2013-06-07T13:42:39-00:00

Hi jallwine,

Here's a workaround for you :
- Download the API reference clients from https://github.com/Shapeways/shapeways-api
- Save the Consumer Key you got from http://developers.shapeways.com/manage-apps and save it in php-pecl/consumer_key.php
- Use php-pecl/Authorize-oauth1-pecl.php to get an Access Token

Use this Access Token as a generic Access Token together with the Consumer Key in myawesome3dprintsite.com to use the Shapeways API.
The users of myawesome3dprintsite.com do not have to deal with anything OAuth and can order the models you uploaded to Shapeways for them (from myawesome3dprintsite.com) via the secretKey feature.

-- Hans

Re: Could we have OAuth 2.0 with generic access tokens?

jallwine — 2013-06-07T13:06:18-00:00

Well, the idea would be that you wouldn't need to request it in code. You'd be able to just copy it from the same page that you copy the app key and secret and possibly even revoke it and get another one if needed. They you wouldn't really even need to know anything about OAuth, you could just make requests with your access token to use the API.

But anyway, since that's not an option currently, how does a server request an access key from Shapeways? Doesn't it still need to jump through the same hoops that a user would have to? So the server would make a request for an access token, it would get redirected to login and then asked for permission to allow the app access and then you'd finally have an access token? Or is there an end point that can avoid the redirect loop by logging in directly?