I don't know if this is directly relevant, but some Ruby infrastructures treat the parts of multipart forms as if they're params, and sign them. I ran into this on the provider side, but it wouldn't surprise me to have trouble on the consumer side.
RFC5849 specifies that parameters of multipart documents (i.e., the parts) are *NOT* included in the signature, but many Ruby infrastructures treat all parameters, whether they're encoded as x-www-urlencoded or form/multipart as if they're the same. I'm not as familiar with the PHP infrastructures, but this is a spot where convenient middleware gets in the way of correct implementation. I ran into this problem when using the oauth_provider code (http://github.com/halorgium/oauth_provider) and oauth-0.4.1 gem) from github with Sinatra; Sinatra & Rack had confused the parameters. That's not the same situation you have. -- ReC (aka cobbr2) On Oct 13, 2010, at 9:41 AM, spidaman wrote: > We've been working with a ruby client (uses the latest gem from > http://github.com/oauth/oauth-ruby) that hits an API implemented with > the php library at http://oauth.googlecode.com/svn/code/php/OAuth.php > integrated in. > > Normal GETs and POSTs seem to work fine but theres a file upload API > we're trying to work out but haven't yet figured out a way to get the > ruby Net::HTTP requests signed in way that the php OAuth server will > accept. I'm not clear on what the accept practice is here. > > Example I've looked thus far have been ineffective: > * http://wiki.openstreetmap.org/wiki/OAuth/Examples > * http://github.com/archiloque/rest-client > ...the signature is always rejected by the php library. > > Has anyone else figured how to get multipart POSTs posted to that php > library to signed acceptably and post some code? > > -- > You received this message because you are subscribed to the Google Groups > "OAuth" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/oauth?hl=en. > -- You received this message because you are subscribed to the Google Groups "OAuth" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/oauth?hl=en.
