rails3 sample app does not work with oauth_token query param

[wireframe]

ex:
curl -v -XGET 'localhost:3000/me?oauth_token=VMhkQHqCeJ4IdMJaxF6SzQ=='

[nov]

Ah, sorry.

The Rack::OAuth2's README was wrong.
Actually, it support "The OAuth 2.0 Protocol: Bearer Tokens"'s draft 04 not 03.
http://tools.ietf.org/html/draft-ietf-oauth-v2-bearer-04

The newest bearer token spec doesn't support "oauth_token" at all and use "bearer_token" instead.

[wireframe]

thanks for clarifying. i've been going though lots of oauth examples, and they were using the oauth_token param. according to the spec, the bearer_token should be supported as part of the query string. is this currently supported by the gem?
it does not appear to be accepted as a query param. ex:
curl -v -XGET 'http://localhost:3000/me?bearer_token=9NFyf9d2NM+jpfM0OBlCGw=='

but header and payload work fine. ex:
curl -v -XGET 'http://localhost:3000/me' -F bearer_token='9NFyf9d2NM+jpfM0OBlCGw=='
curl -v -XGET 'http://localhost:3000/me' -H 'Authorization: Bearer 9NFyf9d2NM+jpfM0OBlCGw=='

[nov]

Yes, bearer_token in query is supported.
You need to do URL encode for the value though.

[wireframe]

Ah, perfect. that totally makes sense.

I realize that query param is not the preferred solution, and intended to
only use it during testing so it wasn't too big of a deal.

thanks again for the fast response!

On Thu, Apr 21, 2011 at 10:30 AM, nov <
reply@reply.github.com>wrote:

Yes, bearer_token in query is supported.
You need to do URL encode for the value though.

Reply to this email directly or view it on GitHub:
#2 (comment)

• Ryan Sonnek
• twitter: twitter.com/wireframe6464
• phone: 949.351.7290

[nov]

No problem.

Since you use Ruby (= you can use HTTP header), I recommend you to use Authorization header anytime.
If you use Rack::OAuth2::AccessToken::Bearer, it always use the header.

nov

On Apr 22, 2011, at 1:17 AM, wireframereply@reply.github.com wrote:

Ah, perfect. that totally makes sense.

I realize that query param is not the preferred solution, and intended to
only use it during testing so it wasn't too big of a deal.

thanks again for the fast response!

On Thu, Apr 21, 2011 at 10:30 AM, nov <
reply@reply.github.com>wrote:

Yes, bearer_token in query is supported.
You need to do URL encode for the value though.

Reply to this email directly or view it on GitHub:
#2 (comment)

• Ryan Sonnek
• twitter: twitter.com/wireframe6464
• phone: 949.351.7290

Reply to this email directly or view it on GitHub:
#2 (comment)