search

teintinu / dyuproject

Automatically exported from code.google.com/p/dyuproject
Apache License 2.0
1 stars 0 forks source link

Oauth service provider headers parser bug makes the oauth SP functionality non-working #29

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
The parseHeaders method in the ServiceProvider class adds the first 
"Authorization" parameter (the "OAuth realm") to the resultant list of parsed 
params. The method therefore never returns a successful return code, because 
there are 8 parameters in the resultant list. Furthermore, the resultant list 
is later used in signature check calculation, and because it contains an 
unsigned parameter, the calculation is never successful.

The solution would be to remove line 56 in the ServiceProvider class (i.e. 
DON'T store the parsed oauth realm into a list or parameters).

Original issue reported on code.google.com by tin.blas...@gmail.com on 24 Mar 2011 at 4:40