[oauth] Re: Want to make sure I have this right - oAuth 2 Legged

2009-07-25 Thread John Kristian
http://oauth.googlecode.com/svn/spec/ext/consumer_request/1.0/drafts/2/spec.html http://sites.google.com/site/oauthgoog/2leggedoauth/2opensocialrestapi --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups OAuth group. To

[oauth] Re: Want to make sure I have this right - oAuth 2 Legged

2009-07-25 Thread John Kristian
The consumer key, consumer secret and nonce should be unguessable. A popular choice is bits from a cryptographically strong random number generator, encoded as letters and numerals. The nonce should not be a predictable function of other data. Don't add salt to the signature algorithm. That