Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OAuth header signing #18

Open
YurijOdud opened this issue Dec 17, 2014 · 0 comments
Open

OAuth header signing #18

YurijOdud opened this issue Dec 17, 2014 · 0 comments

Comments

@YurijOdud
Copy link

Hello,

One question, does OAuth header regenerated after 'GetRequestToken' method execution?
var tokenResponse = await authorizer.GetRequestToken("https://api.some_app.com/v0/oauth/initiate");

I meant, for instance, first, when we compute the hash, we did it during app start. We create signature key as key=encode('consumerSecret&') and buffer as Request method&link&blablabla.

But after we get request token, the signature key should be renew as: key=encode('consumerSecret&requestToken.Secret') and buffer as usual.

So, seems like, signature key after getting of request token do not renewed and when we try to navigate by authorize url
authorizer.BuildAuthorizeUrl("https://api.some_app.com/v0/oauth/authorize", requestToken);
we will have response like '< title >Authorization error</ title >'.
error: Invalid token or something went wrong. Please, return to application page and try to authorize once more.

Is it possible to force regenerate a signature, but at the same time keep 'auth_nonce' and 'oauth_timestamp' old values. Or even does it make sense?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant