[oauth] Re: Java OAuth Library and POST Requests Failing Validation

2010-03-06 Thread John Kristian
This might give you some helpful information:

OAuthResponseMessage response = ...
responseCode = response.getHttpResponse().getStatusCode();
if (responseCode != 200) {
  Map dump = response.getDump();
  System.out.println(dump.get(HttpMessage.REQUEST));
  System.out.println("---");
  System.out.println(dump.get(HttpMessage.RESPONSE));
  System.out.println("---");
}

You can use 
http://oauth.googlecode.com/svn/code/javascript/example/signature.html
to check the signature.

On Mar 5, 4:52 pm, thnguyen  wrote:
> I'm using John Kristian's Java OAuth library and am running into a
> problem with POST requests.  Signature validation is failing for POST
> requests containing querystring parameters.  The requests contains
> Content-Type: application/xml with an XML payload.
>
> When I remove the querystring parameter from the request the signature
> validation succeeds.  Does anyone have any insight on why signature
> validation fails when adding a querystring parameter?
>
> I've pasted my code to test the OAuth protected resource 
> here:http://pastie.org/856701

-- 
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oa...@googlegroups.com.
To unsubscribe from this group, send email to 
oauth+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/oauth?hl=en.



[oauth] Re: Why must we change temporary credentials for token credentials?

2010-03-06 Thread John Kristian
Some service providers put information into the access token, such as
the user identity, privileges granted etc.  This can help performance
and scalability.

On Mar 3, 11:42 pm, PK  wrote:
> "Can't the server just "upgrade" the temporary credentials to token
> credentials and retain the same key and secret?
>
> The client can then start doing authenticated calls right away after
> the recieving the callback from the server stating that the temporary
> credentials has been "upgraded".

-- 
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oa...@googlegroups.com.
To unsubscribe from this group, send email to 
oauth+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/oauth?hl=en.