Hi. For the life of me, I can't figure out why my provider won't validate the signature that the OAuth proxy calculates for the request for my OAuth request token.
I'm using the RSA key as specified here: http://code.google.com/apis/gadgets/docs/oauth.html And I've got a sample gadget defined here: http://webcohesion.appspot.com/sparklr_gadget.xml (It's basically a copy of the gadget example on the OAuth proxy page.) My only conclusion is that the signature base string I'm calculating is different from that which the OAuth proxy is calculating. Can someone please help me see what I'm doing wrong? Or let me know how I can find out what signature base string is calculated by the OAuth proxy? The request is pretty clear: GET /oauth/request_token Host: webcohesion.appspot.com X-Shindig-AuthType: none Authorization: OAuth opensocial_owner_id="109190140453754943808", opensocial_viewer_id="109190140453754943808", opensocial_app_id="107141800671537093966", opensocial_app_url="http%3A %2F%2Fwebcohesion.appspot.com%2Fsparklr_gadget.xml", xoauth_signature_publickey="pub.1210278512.2713152949996518384.cer", oauth_version="1.0", oauth_timestamp="1250808601", oauth_consumer_key="www.google.com", oauth_signature_method="RSA- SHA1", oauth_nonce="1250808601299991000", oauth_signature="IHKBsgapgydokcD%2FQZtFEVYgJuC9XmEUGlxcbeVxd %2BGICyiVrXmH90MpLsPcTNVxNPOlGO86d1LYJax6C8fz1iqJO1u %2FtjUadLpiB93wHCS2nWN%2BAPNukSdUTp%2FetHF1Z6%2FHLBLazJrN96j4Lc %2F1MszB44utG6lzzFftrX4sjp8%3D" And the signature base string that I calculate: GET&http%3A%2F%2Fwebcohesion.appspot.com%2Foauth %2Frequest_token&oauth_consumer_key%3Dwww.google.com%26oauth_nonce %3D1250808601299991000%26oauth_signature_method%3DRSA- SHA1%26oauth_timestamp%3D1250808601%26oauth_version %3D1.0%26opensocial_app_id%3D107141800671537093966%26opensocial_app_url %3Dhttp%3A%2F%2Fwebcohesion.appspot.com%2Fsparklr_gadget.xml %26opensocial_owner_id%3D109190140453754943808%26opensocial_viewer_id %3D109190140453754943808%26xoauth_signature_publickey%3Dpub. 1210278512.2713152949996518384.cer --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "iGoogle Developer Forum" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/Google-Gadgets-API?hl=en -~----------~----~----~----~------~----~------~--~---
