[OpenSocial] Looking for a working example of request verification

[Pierre Henri Kuate]

Hi,

I asked this question on another forum (http://groups.google.com/group/
opensocial-client-libraries/browse_thread/thread/2bd9eaaa0511c89d/
ef248f92a591dd45), but this one might be better suited:

I am developing a .NET client library for the RESTful services of
OpenSocial: http://code.google.com/p/opensocial-net-client/

I have some problem with request validation and I'm looking for a
working example. Ie: A url posted by the container (with the signature
created using HMAC-SHA1), and a C# or Java code validating it.

First, I had modified the implementation of the Java library to:

// --- START ---

  public static boolean verifyHmacSignature(
      HttpServletRequest request, String consumerSecret)
      throws IOException, URISyntaxException {

    String method = request.getMethod();
    String requestUrl = getRequestUrl(request);
    List<OAuth.Parameter> requestParameters = getRequestParameters
(request);

    return verifyHmacSignature(method, requestUrl, requestParameters,
consumerSecret);
  }

  public static boolean verifyHmacSignature(
      String method, String requestUrl, List<OAuth.Parameter>
requestParameters, String consumerSecret)
      throws IOException, URISyntaxException {

    OAuthMessage message =
        new OAuthMessage(method, requestUrl, requestParameters);

    OAuthConsumer consumer =
        new OAuthConsumer(null, null, consumerSecret, null);
    OAuthAccessor accessor = new OAuthAccessor(consumer);

    try {
      message.validateMessage(accessor, new SimpleOAuthValidator());
    } catch (OAuthException e) {
      return false;
    }

    return true;
  }

// --- END ---

I tried the following program with some values, but none worked.

// --- START ---

import net.oauth.OAuth.Parameter;
import org.opensocial.client.OpenSocialRequestValidator;

import java.util.List;
import java.util.ArrayList;

public class OpenSocialRequestValidatorTest {
  public static void main(String[] args) {
    try {
      List<Parameter> parameters = new ArrayList<Parameter>();
      parameters.add(new Parameter("opensocial_owner_id", ""));
      parameters.add(new Parameter("opensocial_viewer_id", ""));
      parameters.add(new Parameter("opensocial_app_id",
"03601006638329987009"));
      parameters.add(new Parameter("opensocial_app_url", "http://
opensocial-resources.googlecode.com/svn/samples/rest_rpc/
sample.xml"));
      parameters.add(new Parameter("oauth_consumer_key",
"623061448914"));
      parameters.add(new Parameter("oauth_version", "1.0"));
      parameters.add(new Parameter("oauth_signature_method", "HMAC-
SHA1"));
      parameters.add(new Parameter("oauth_timestamp", ""));
      parameters.add(new Parameter("oauth_nonce", ""));
      //parameters.add(new Parameter("oauth_signature", ""));

      System.out.println("Valid = " +
      OpenSocialRequestValidator.verifyHmacSignature("POST", "",
parameters, "uynAeXiWTisflWX99KU1D2q5"));
    }
    catch (Exception e) { System.out.println("Exception: " + e); }
  }

}

// --- END ---

Could someone provide the missing values that would make
verifyHmacSignature() return true?
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OpenSocial Application Development" group.
To post to this group, send email to opensocial-api@googlegroups.com
To unsubscribe from this group, send email to 
opensocial-api+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/opensocial-api?hl=en
-~----------~----~----~----~------~----~------~--~---