Question

我正在尝试拨打需要两条腿OAuth的OpenPaths.cc rest service API。为此，我使用DevDefined.OAuth library（我尝试了nuget包和github的最新版本）。当我没有在查询字符串中传递参数但在传递参数时返回400 NOT AUTHORIZED时，它可以工作。

没有参数的工作样本：

public class OpenPathsRequest
{
    private const string accessKey = "your personal access key";
    private const string secretKey = "your personal secret";
    private const string url = "https://openpaths.cc/api/1";
    private OAuthSession session;

    public OpenPathsRequest()
    {
        var consumerContext = new OAuthConsumerContext
        {
            ConsumerKey = accessKey,
            ConsumerSecret = secretKey,
            SignatureMethod = SignatureMethod.HmacSha1,
            UseHeaderForOAuthParameters = true
        };
        session = new OAuthSession(consumerContext, url, url, url);
    }

    private string GetWebResponseAsString(HttpWebResponse response)
    {
        Encoding enc = System.Text.Encoding.GetEncoding(1252);
        StreamReader loResponseStream = new StreamReader(response.GetResponseStream(), enc);
        return loResponseStream.ReadToEnd();
    }

    public string GetResponse()
    {
        HttpWebResponse response = session.Request().Get().ForUrl(url).ToWebResponse();
        var result = GetWebResponseAsString(response);
        return result;
    }
}

class Program
{
  static void Main(string[] args)
  {
      // create new OpenPathsRequest and get result
      var request = new OpenPathsRequest();
      var response = request.GetResponse();
      Console.WriteLine(response);
      Console.WriteLine("Press any key...");
      Console.ReadKey();
  }
}

但是，当我更改GetResponse方法并传入2个参数（start_time和end_time）时，如下所示：

public string GetResponse()
{            
    HttpWebResponse response = session.Request().Get().ForUrl(url).WithQueryParameters(
        new { start_time = 1364962612, end_time = 1364991412  }).ToWebResponse();
    var result = GetWebResponseAsString(response);
    return result;
}

导致以下HTTP请求（省略了使用者密钥）：

GET https://openpaths.cc/api/1?start_time=1364962612&end_time=1364991412 HTTP/1.1
Authorization: OAuth oauth_nonce="7b5da37a-6227-4ded-ae8b-a695e789ef90",oauth_consumer_key="**********",oauth_signature_method="HMAC-SHA1",oauth_timestamp="1365058952",oauth_version="1.0",oauth_signature="tAk4KMj%2FsiG6BTLSmvDNKXbBpNs%3D"
Host: openpaths.cc
Connection: Keep-Alive

我收到错误回复：

HTTP/1.1 400 Bad Request
Date: Thu, 04 Apr 2013 07:03:26 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Content-Length: 19
Server: TornadoServer/2.0
Set-Cookie: _xsrf=bf20487382b64eeb8646d31b0770db85; Path=/
Set-Cookie: session_id=ZTk2Mjk1MzIzNWNiMmRjMTY1ZmY5Y2ExNWUwMGY5ZTAxZmY1NGIyODljZGJiNzRlMmIyMWI4NTA3YzUwYWJlYg==|1365059006|7459a7ff95039279e9686ceb76b58918fd9f3e48; expires=Thu, 04 Apr 2013 07:18:26 GMT; Path=/

400: NOT AUTHORIZED

非常感谢所有帮助。提前谢谢。

Harmen

Answer 1

解决！显然，OpenPaths.cc api要求在签名基本字符串中不使用其他查询参数进行签名。我相信这不是根据OAuth的规格，是吗？无论如何，使用DevDefined.OAuth我可以通过在调用WithQueryParameters之前调用SignWithoutToken来轻松解决这个问题：

public string GetResponse()
{            
    HttpWebResponse response = session.Request().Get().ForUrl(url).
        SignWithoutToken().
        WithQueryParameters(new { start_time = 1364962612, end_time = 1364991412  }).
        ToWebResponse();
    var result = GetWebResponseAsString(response);
    return result;
}

在OpenPaths.cc api调用中传递查询字符串参数，OAuth无法正常工作

1 个答案: