Question

我正在尝试通过Twitter签名请求，以便我可以获得请求令牌并被卡住。我已经使用了twitter在他们的文档中使用的信息，以确保我已经正确格式化等等。我有相同的Basestring和Key，但我仍然没有获得相同的签名。我看了几个其他的例子，我似乎做了同样的事情。

愿意帮助解决这个问题！

以下是代码：

    private function sign_request($http_method, $url, $params, $oath)
    {
        // SET BASE STRING
        $sign_params    =   $this->set_sign_params($params, $oath);
        $sign_url       =   $this->set_sign_url($url);
        $base_string    =   $this->set_sign_basestring($http_method, $sign_params, $sign_url);

        print $base_string; // Output the same as the twitter example: POST&https%3A%2F%2Fapi.twitter.com%2Foauth%2Frequest_token&oauth_callback%3Dhttp%3A%2F%2Flocalhost%3A3005%2Fthe_dance%2Fprocess_callback%3Fservice_provider_id%3D11%26oauth_consumer_key%3DGDdmIQH6jhtmLUypg82g%26oauth_nonce%3DQP70eNmVz8jvdPevU3oJD2AfF7R7odC2XJcn4XlZJqk%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1272323042%26oauth_version%3D1.0


        // GET HMAC-SHA1 SIGNATURE
        if($this->signature_method == 'HMAC-SHA1')
        {               
            // SET KEY
            $key = $this->set_sign_key();

            print $key; // Output the same as the twitter example: MCD8BKwGdgPHvAuvgvz4EQpqDAtx89grbuNMRd7Eh98&

            //SIGN
            $signature = base64_encode(hash_hmac('sha1', $base_string, $key, true)); 

            print $signature; // DO NOT output the same as the twitter example. Twitteroutput: 8wUi7m5HFQy76nowoCThusfgB+Q= and my outout: Ewqbgi+AMRZGMcqwQTjhE5/ZD80= 
        }

        return $signature;
    }

我错过了什么？有人有任何想法吗？

另外一个“有趣”的事情是，如果我在Twitter示例中设置了signture，我仍然无法获得请求令牌...

先谢谢！

Answer 1

您的基本字符串与Twitter的字符串不同。这就是为什么你会得到不同的签名。

Twitter的：

POST&https%3A%2F%2Fapi.twitter.com%2Foauth%2Frequest_token&oauth_callback%3Dhttp%253A%252F%252Flocalhost%253A3005%252Fthe_dance%252Fprocess_callback%253Fservice_provider_id%253D11%26oauth_consumer_key%3DGDdmIQH6jhtmLUypg82g%26oauth_nonce%3DQP70eNmVz8jvdPevU3oJD2AfF7R7odC2XJcn4XlZJqk%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1272323042%26oauth_version%3D1.0

您的：

POST&https%3A%2F%2Fapi.twitter.com%2Foauth%2Frequest_token&oauth_callback%3Dhttp%3A%2F%2Flocalhost%3A3005%2Fthe_dance%2Fprocess_callback%3Fservice_provider_id%3D11%26oauth_consumer_key%3DGDdmIQH6jhtmLUypg82g%26oauth_nonce%3DQP70eNmVz8jvdPevU3oJD2AfF7R7odC2XJcn4XlZJqk%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1272323042%26oauth_version%3D1.0

区别在于oauth_callback变量。

Twitter的：

oauth_callback%3Dhttp%253A%252F%252Flocalhost%253A3005%252Fthe_dance%252Fprocess_callback%253Fservice_provider_id%253D11%26

您的：

oauth_callback%3Dhttp%3A%2F%2Flocalhost%3A3005%2Fthe_dance%2Fprocess_callback%3Fservice_provider_id%3D11%26

Twitter - 签名请求失败

1 个答案: