Skip to content

techmag/OAuthPlainTextCalculator

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

OAuthPlainTextCalculator

Scala (work-around) to handle APIs that use PLAINTEXT Oauth signing

The Scala docs https://www.playframework.com/documentation/2.4.x/ScalaOAuth have an example for a Twitter API client with a segment that "signs" WS.urls with an OAuthCalculator

This is a direct dropin replacement for any similar OAuth based API that needs PLAINTEXT signing.

Note: Some vendors use this with though that HTTPS would pretect them however be aware that PLAINTEXT is NOT actually signed! So use HMAC-SHA1 IF you can.

For those that think PLAINTEXT under SSL might be an acceptable alternative I invite you to read this: https://www.grc.com/fingerprints.htm courtesy of Steve Gibson Research @GibsonResearch

Note that if you are implementing the Play Docs example you might want to change the line that reads

TWITTER.retrieveRequestToken("http://localhost:9000/auth") match {

to

TWITTER.retrieveRequestToken(routes.TKTwitterController.authenticate.absoluteURL()(request)) match {

WOuld have been nice to know how to do that right from the docs...

About

Scala (work-around) to handle APIs that use PLAINTEXT Oauth signing

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages