[oauth] build signature base string

2009-11-04 Thread k42b3

hello,

Iam currently implementing an oAuth consumer in PHP. I have a question
while
building the base string to sign my request
(http://oauth.net/core/1.0a#sig_norm_param)

I make an request that contains GET and POST variables i.e.


POST /some/api?id=foo HTTP/1.1
Host 127.0.0.1
Authorization: OAuth [parameters ...]
Content-Type: application/x-www-form-urlencoded

content=wusahh


my question is now should I use as request parameters the GET and POST
variables
or only the POST variables? In other words should I add
"id=foo&content=wusahh" or
"content=wusahh" to build the base string.

The question occurs because I use the oAuth test server at
http://term.ie/oauth/example/
to test my consumer ... but the implementation of this server tells me
that I have a wrong
base string when I use both but when I use only the POST vars it works.

As I understand the specification I should use both (GET and POST) but
plz correct me
whether I understand that false or the implementation is wrong?


best regards
k42b3

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oauth@googlegroups.com
To unsubscribe from this group, send email to oauth+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/oauth?hl=en
-~--~~~~--~~--~--~---



[oauth] test OAuth consumer and service provider

2009-11-18 Thread k42b3
hi OAuth folks,

I like to announce a test consumer and service provider.

http://dev.k42b3.com/index.php/oauth

this is a implementation of the specification OAuth 1.0 Revision A. Because
I missed a test server
while Iam trying to understand the concept of OAuth ... I developed this
OAuth service provider and
consumer. This should help people to understand OAuth and to test
applications that are based on it.


best regards
k42b3

--

You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oa...@googlegroups.com.
To unsubscribe from this group, send email to 
oauth+unsubscr...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/oauth?hl=.




Re: [oauth] Re: test OAuth consumer and service provider

2009-12-11 Thread k42b3
hi hitoshi uchida,

as I have seen so far at http://googlecodesamples.com/oauth_playground/
you can only work with
google APIs that means you cant access external OAuth service providers.
This is because google
uses scopes wich is not part of the OAuth specification (but its a great
idea to narrow down the
rights of a user to a specific service). The consumer at
http://dev.k42b3.com/index.php/oauth/consumer
does the same job as google playground but you can connect to every
service provider you like.

regards
k42b3

--

You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oa...@googlegroups.com.
To unsubscribe from this group, send email to 
oauth+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/oauth?hl=en.




Re: [oauth] Communicating User Denial to Consumer

2009-12-15 Thread k42b3
hi Jimmy,

as I understand the specification doesnt specify any parameter for that
so you can use the oauth extension i.e. add the param

x_oauth_error=access+denied

to the callback url.


regards
k42b3

--

You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oa...@googlegroups.com.
To unsubscribe from this group, send email to 
oauth+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/oauth?hl=en.




Re: [oauth] oauth_callback parameter not sent to getsatisfaction

2010-04-26 Thread k42b3

hi,


However GetSatisfaction requires that
oauth_callback=http://mysite.com/myresource be sent along with the
authorization url


As you mentioned the callback url must be send when you obtain the 
"Temporary Credentials". You can set the callback to "oob" but then you 
have to provide the url in anotherway to GetSatisfaction.



Unfortunately since my callback url is different at different entry
points


Then you probably must use the oauth_callback param. I dont know the API 
of GetSatisfaction but if its not according to the specification you 
should probably contact them.


best regards

--
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oa...@googlegroups.com.
To unsubscribe from this group, send email to 
oauth+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/oauth?hl=en.