Hi,

Has the patch committed yet so I can try?

ThanksĀ  

--- On Mon, 7/14/08, Chris Chabot <[EMAIL PROTECTED]> wrote:
From: Chris Chabot <[EMAIL PROTECTED]>
Subject: Re: public certificate key
To: [email protected]
Date: Monday, July 14, 2008, 11:16 AM

Hey Karsten,

Don't worry i didn't miss the patch, been hecticly busy this weekend  
with trying to get basic atom support done; I'll make sure to commit  
it tonight

        -- Chris

On Jul 14, 2008, at 4:46 PM, Karsten Beyer wrote:

> Hi,
> for the php version:
>
> https://issues.apache.org/jira/browse/SHINDIG-447
>
> Summary: the proxy is called with the signOwner and signViewer  
> parameters.
> They are both included in the signature base_string. Then the  
> application
> page is called without these paramters. So signatures will not match.
>
> Patch for /php/src/gadgets/oauth/OAuth.php against current trunk:
>
> Index: .
> ===================================================================
> --- . (revision 676605)
> +++ . (working copy)
> @@ -292,8 +292,7 @@
>  $parameters = is_array($parameters) ? $parameters : array();
>  $defaults = array("oauth_nonce" =>
OAuthRequest::generate_nonce(),
>  "oauth_timestamp" => OAuthRequest::generate_timestamp(),
> - "oauth_consumer_key" => $consumer->key, 'synd'
=> 'partuza',
> - 'container' => 'partuza');
> + "oauth_consumer_key" => $consumer->key);
>  $parameters = array_merge($defaults, $parameters);
>  if (isset($token)) {
>  $parameters['oauth_token'] = $token;
> @@ -393,6 +392,9 @@
>  $parts = parse_url($this->http_url);
>  parse_str(@$parts['query'], $params);
>  foreach ($params as $key => $value) {
> + if ($key == "signOwner" || $key == "signViewer") {
> + continue;
> + }
>  $this->parameters[$key] = $value;
>  }
>  $parts = array($this->get_normalized_http_method(),
> $this->get_normalized_http_url(),
>
> This fixes it with a (very extremely ugly) hack (patch for some  
> other bug
> (hard-coded partuza container name) included, as this patch was not  
> yet
> committed).
>
> I will try to understand the complete oauth signing process later in  
> the
> week and try to supply a "acceptable" patch, as this is a show- 
> stopper right
> now for our planned end-of-july release plans...
>
> However with above patch applied, i can successfully validate a  
> signature
> with the linked method from google.
>
> Best Regards
>
> Karsten Beyer
>
> On Mon, Jul 14, 2008 at 4:34 PM, Gonzalo Aune  
> <[EMAIL PROTECTED]> wrote:
>
>> I was trying to run the example in the Java and the PHP side without
>> success, anyone could run this example?.
>>
>> G.-
>>
>> On Mon, Jul 14, 2008 at 11:30 AM, xin zhang <[EMAIL PROTECTED]> 

>> wrote:
>>
>>> Hi,
>>>
>>> I am trying the example from
>>>
>>
http://code.google.com/p/opensocial-resources/wiki/OrkutValidatingSignedRequestsonshindig

>> , how to generate the public certificate key for shindig?
>>>
>>> Thanks
>>>
>>>
>>>
>>>
>>


      

Reply via email to