How do we disable Signature & timestamp verification in Python ASK

Hello @Gypsy and thank you for your patience while we looked into this.

Here is what our internal team had to say:

As mentioned in the documentation, the ask_sdk_webservice_support.verifier.RequestVerifier and ask_sdk_webservice_support.verifier.TimestampVerifier are both added to the skill verifier list by default. If you want to disable this, the VERIFY_SIGNATURE_APP_CONFIG and VERIFY_TIMESTAMP_APP_CONFIG app configuration values must both be set to False.

These configuration values have to be set on the flask app itself and not on the skill adapter instance as you mentioned. When a flask app is provided to the skilladapter, it will set these verifiers by default to True in the application configuration, if they do not exist. For example, the code snippet shows how to disable the verifiers:

from flask_ask_sdk.skill_adapter import VERIFY_SIGNATURE_APP_CONFIG, VERIFY_TIMESTAMP_APP_CONFIG 
app.config.setdefault(VERIFY_SIGNATURE_APP_CONFIG, False) 
app.config.setdefault(VERIFY_TIMESTAMP_APP_CONFIG, False) 
skill_adapter = SkillAdapter(skill=sb.create(), app=app, skill_id=12345)

The verifiers list on the SkillAdapter instance are any additional verifiers apart from request and timestamp verifier that needs to be applied on the input request.

I hope this helps with your issue.

Regards,
Barry

Hi @Gypsy,

I have reached out internally to try and clarify this, but I would also suggest you to create an issue in the repository.

Regards,
Barry