This site was built to compliment the existing NetSuite Professionals Slack Community by adding a means for members to easily find answers to common questions and to create a searchable database of those questions and answers.

NetSuite Professionals

Hello there! I'm trying to send a post request with suiteql in order to get all items, using javascript fetch. It works fine when I use the url "<https://my_account.suitetalk.api.netsuite.com/services/rest/query/v1/suiteql>", but I get a "401 Unauthorized" error when I add limit and offset to the url (like this : "<https://my_account.suitetalk.api.netsuite.com/services/rest/query/v1/suiteql?limit=1000&amp;offset=1000>") and I didn't change anything in the authentication method. Any idea ?

Can you share your SQL?  Be aware that `LIMIT` and `OFFSET` are not supported in SuiteQL AFAIK

How are you generating the oauth signature? I'm guessing the URL parameters aren't being included in the base string

<@U4TPAFXEC> Here is my SQL : "SELECT id FROM item WHERE itemtype = 'Assembly' ORDER BY id"

<@U29QCJQF3> Should I include the limit and offset parameters in the url used to generate the signature or not ? When I generate the signature using the base URL "<https://my_account.suitetalk.api.netsuite.com/services/rest/query/v1/suiteql>", it works but I am not able to get results with limit and offset parameters. I don't know how to make it work

This my code to generate the signature :
```const collectedString = `oauth_consumer_key=${consumerKey}&amp;oauth_nonce=${nonce}&amp;oauth_signature_method=${signatureMethod}&amp;oauth_timestamp=${time}&amp;oauth_token=${token}&amp;oauth_version=${version}`;

const encodedString = encodeURIComponent(collectedString);
const encodedUrl = encodeURIComponent(url);

const base = `POST&amp;${encodedUrl}&amp;${encodedString}`;
const key  = `${consumerSecret}&amp;${tokenSecret}`;

const signature = createHmac('sha256', key).update(base).digest('base64');```

Yes the query string parameters have to be included in the base string that is signed. <https://datatracker.ietf.org/doc/html/rfc5849#section-3.4.1.3.1|https://datatracker.ietf.org/doc/html/rfc5849#section-3.4.1.3.1>

<@U29QCJQF3> Thank you very much !! I finally made it work :partying_face: