- Is this package compatible with Laravel or modern PHP frameworks?
- No, this bundle is explicitly designed for OroCommerce 1.x, which is built on Symfony 2.x. Laravel (8+/9+) projects would require significant refactoring or a Symfony2 bridge to integrate it, making it impractical for modern Laravel ecosystems.
- What Laravel alternatives exist for Alexa API integration?
- For Laravel, consider using Laravel Echo with the Alexa Skill Kit or custom API wrappers like Guzzle + Laravel Sanctum for OAuth2/JWT authentication. These avoid legacy dependencies and offer better scalability.
- How do I install this bundle in OroCommerce 1.x?
- Run `composer require agencednd/oro-api-connector-bundle` in your OroCommerce 1.x project directory, then clear the API doc cache with `php app/console oro:api:doc:cache:clear -e prod`. Copy the WSSE script to your web folder and protect it with `.htpasswd`.
- Does this bundle support OAuth2 for authentication?
- No, it relies on WSSE (deprecated), which OroCommerce planned to replace with OAuth2 in v2+. Since OroCommerce 1.x lacks native OAuth2, you’d need a custom implementation or third-party middleware.
- Can I use this for OroCommerce 2.x or newer versions?
- No, this bundle is tested only for OroCommerce 1.x. OroCommerce 2.x+ introduced breaking API changes, and the bundle’s Symfony2 dependencies would conflict with newer Symfony versions.
- What security risks does WSSE pose in production?
- WSSE is insecure by modern standards. Mitigate risks by enforcing HTTPS, IP whitelisting, and `.htpasswd` protection for the WSSE script. However, OAuth2 or JWT are strongly recommended for new projects.
- How does this bundle handle API rate limits for Alexa?
- OroCommerce 1.x has default rate limits that may slow Alexa’s real-time responses. Test under load to ensure AWS Lambda cold starts (100–500ms) don’t exceed Alexa’s 1–2 second timeout for voice commands.
- Is this bundle actively maintained? When was the last update?
- The last release was in 2017, and OroCommerce 1.x is end-of-life. The Agence DnD team hasn’t updated it for 6+ years, so maintenance risks (e.g., Symfony2 vulnerabilities) fall on you.
- Can I integrate this with non-Alexa voice platforms like Google Assistant?
- No, the bundle’s AWS Lambda setup and Alexa-specific intents.json are vendor-locked. Porting to Google Assistant would require rewriting the entire skill logic and auth flow.
- What if OroCommerce 1.x’s internal APIs change or break?
- This bundle relies on undocumented OroCommerce 1.x internals (e.g., `oro:api:doc:cache:clear`). Any updates to Oro’s API layer could break compatibility, requiring manual patches.