Skip to content

Invalid OAuth1 signature for GET requests #271

@devatwork

Description

@devatwork

The current implemenation of the OAuth1Authenticator does not generate the signature base string properly for GET parameters causing invalid signatures according to RFC 5849 - The OAuth 1.0 Protocol, http://tools.ietf.org/html/rfc5849#section-3.4.1.

I was able to reproduce this problem using the Vimeo API. There are other people who encountered this problem as well: http://groups.google.com/group/restsharp/browse_thread/thread/43d0163e9e04ea4c.

In the method OAuth1Authenticator.AddOAuthData() the following if statement causes the problem.

// for non-GET style requests make sure params are part of oauth signature
if (request.Method != Method.GET && request.Method != Method.DELETE)

I will send a test+fix as a pull request as soon as I can.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions