search

edisona / oauth

Automatically exported from code.google.com/p/oauth
1 stars 0 forks source link

obj-c with HMAC_SHA is missing encoding #30

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
By testing the obj-c (rev 587) oAuth library against our oAuth supported
API system we found a problem with the signature calculation.

The key used for the HMAC_SHA should be url-encoded separately before
joined, as defined in the oAuth spec (http://oauth.net/core/1.0/#anchor16).
Currently, the 2 secrets that are joined together aren't url-encoded at all.

A patch will be provided next week.

Kilian Marjew
Hyves.nl

Original issue reported on code.google.com by kilian.m...@gmail.com on 28 Jun 2008 at 8:57

GoogleCodeExporter commented 9 years ago

Original comment by andyster on 15 Jul 2008 at 11:18

GoogleCodeExporter commented 9 years ago 
This is fixed beginning from revision 829.

Original comment by zsom...@gmail.com on 20 Dec 2008 at 10:58