I got signature generation working correctly for "account/ verify_credentials.xml" thanks to help on this forum.
However when I attempt "friendships/destroy/xxxxxx.xml" as a POST or DELETE I get the dreaded 401 Invalid Oauth Request. I checked the parameters against the signature validator at http://oauth.googlecode.com/svn/code/javascript/example/signature.html, which gave me the correct signature for my verify_credentials parameters, but does not give me the same signature I get for destroy parameters. Here is the request: http://twitter.com/friendships/destroy/15461990.xml?oauth_consumer_key=C7BVu4yBnGRvRV8xUx1D7w&oauth_nonce=21EE501E91E6A5CF6A6724793658F9E0D9FC0AC0&oauth_signature=%2BR2zw1REmAGbnmgjAZihcbM95Tk%3D&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1237632718&oauth_token=14846470-bY5SM8cCf1iUryZEgakmX7G8fOyGtUy0vJzLnA...&oauth_version=1.0 Token secret: WALA8Z6TnfU1LcOCtgjk8NXukLhVGklxZ7hXBDxw8 Any ideas?