{"action":"created","issue":{"url":"https://api.github.com/repos/matt-kruse/alexa-app/issues/49","labels_url":"https://api.github.com/repos/matt-kruse/alexa-app/issues/49/labels{/name}","comments_url":"https://api.github.com/repos/matt-kruse/alexa-app/issues/49/comments","events_url":"https://api.github.com/repos/matt-kruse/alexa-app/issues/49/events","html_url":"https://github.com/matt-kruse/alexa-app/issues/49","id":128616622,"number":49,"title":"alexa-app doesn't provide certificate validation","user":{"login":"mreinstein","id":718067,"avatar_url":"https://avatars.githubusercontent.com/u/718067?v=3","gravatar_id":"","url":"https://api.github.com/users/mreinstein","html_url":"https://github.com/mreinstein","followers_url":"https://api.github.com/users/mreinstein/followers","following_url":"https://api.github.com/users/mreinstein/following{/other_user}","gists_url":"https://api.github.com/users/mreinstein/gists{/gist_id}","starred_url":"https://api.github.com/users/mreinstein/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mreinstein/subscriptions","organizations_url":"https://api.github.com/users/mreinstein/orgs","repos_url":"https://api.github.com/users/mreinstein/repos","events_url":"https://api.github.com/users/mreinstein/events{/privacy}","received_events_url":"https://api.github.com/users/mreinstein/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2016-01-25T19:26:41Z","updated_at":"2016-01-26T15:17:50Z","closed_at":null,"body":"after going through the submission process, we've been rejected because we're not validating the request signature, as per here: https://developer.amazon.com/public/solutions/alexa/alexa-skills-kit/docs/developing-an-alexa-skill-as-a-web-service#Checking%20the%20Signature%20of%20the%20Request\r\n\r\nI think alexa-app needs to have this logic. I googled around and couldn't find any node.js examples but there are several php and java based examples out there. This might be a good starting point:  http://pastebin.com/d0W9nX60"},"comment":{"url":"https://api.github.com/repos/matt-kruse/alexa-app/issues/comments/175070908","html_url":"https://github.com/matt-kruse/alexa-app/issues/49#issuecomment-175070908","issue_url":"https://api.github.com/repos/matt-kruse/alexa-app/issues/49","id":175070908,"user":{"login":"christianewillman","id":10383333,"avatar_url":"https://avatars.githubusercontent.com/u/10383333?v=3","gravatar_id":"","url":"https://api.github.com/users/christianewillman","html_url":"https://github.com/christianewillman","followers_url":"https://api.github.com/users/christianewillman/followers","following_url":"https://api.github.com/users/christianewillman/following{/other_user}","gists_url":"https://api.github.com/users/christianewillman/gists{/gist_id}","starred_url":"https://api.github.com/users/christianewillman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/christianewillman/subscriptions","organizations_url":"https://api.github.com/users/christianewillman/orgs","repos_url":"https://api.github.com/users/christianewillman/repos","events_url":"https://api.github.com/users/christianewillman/events{/privacy}","received_events_url":"https://api.github.com/users/christianewillman/received_events","type":"User","site_admin":false},"created_at":"2016-01-26T15:17:50Z","updated_at":"2016-01-26T15:17:50Z","body":"+1 with Matt, I get the sense that Amazon _really_ wants Alexa skills hosted in Lambda, so it makes sense for alexa-app to follow suit."}}