> I've stumbled across your post before and it's in fact the document which
> I've based my initial assumptions upon.

Ah, sorry for failing to provide additional info then ;-)

> So technically the changes seem to come down to add one more parameter,
> right? As the 1.0 spec already incorporates all parameters into the signing
> algorithm, we'll get that part automagically without any additional work on
> the *technical* part of the signing process.

Well, 2: `oauth_callback` is introduced as a required parameter when
obtaining request tokens (it was previously optional during the
authorization phase) and `oauth_verifier` is introduced as a required
parameter when exchanging a request token for an access token.

In most cases, adding the new parameters to requests (with appropriate
values, of course) will result in them being included in the signing
process.  So, yes, that should be correct.

seth

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [email protected]
For more options, visit this group at http://groups.google.com/group/oauth?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to