sodatat / oauth-as3

Automatically exported from code.google.com/p/oauth-as3
0 stars 0 forks source link

oauth_version not in hash #18

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
according to the spec here : oauth_version (optional) The OAuth version used by 
the requesting web application. This value must be "1.0"; if not provided, 
Google assumes version 1.0 is in use. 
https://developers.google.com/accounts/docs/OAuth_ref

What is the expected output? What do you see instead?

Here is an example request checker on the server side, 

Normally if you use Net-OAuth-0.28/lib/Net/OAuth/SignatureMethod/HMAC_SHA1 it 
will produce 
the signature  +IgbfeR/Ha/U673EfK0QSPQ0PTA= for the given parameters because it 
adds in the oauth_version=1.0 to the data.

see decode.pl, using 
Produced url http://pine02.fosm.org/FOSM-Api/OSM-API-
oauth_consumer_key=yUV5Mk9FZYEGdFEfZ786AiMl6R9D0flYWXsu10bQ&oauth_nonce=F2EBB736
-C47E-BF79-5A65-680F6D2DC424&oauth_signature_method=HMAC-SHA1&oauth_timestamp=13
33185703 
Sig is 5A32qbq4D/ppZ2r9I+jwQlramBc= 

It turns out that I have to get around this with not setting the default value, 
see decode2.pl, but still it seems to me, as a noob, the 
oauth-as3 is not up to spec,
thanks,
mike

Original issue reported on code.google.com by JamesMikeDuPont@googlemail.com on 31 Mar 2012 at 10:32

Attachments: