Questions tagged [oauth-1.0a]

OAuth 1.0a is revision A of the OAuth protocol. It has been obsoleted by OAuth 2.0. OAuth is a protocol that enables applications to obtain limited access to user accounts on an HTTP service, such as Facebook and GitHub. OAuth is natively supported in Spring Boot. Note that OAuth 2.0 is not backward compatible with OAuth 1.0

OAuth 1.0a is revision A of the OAuth protocol as defined by Internet Engineering Task Force (IETF) in RFC 5849. This mechanism is used by companies such as Amazon, Google, Facebook, Microsoft and Twitter to permit the users to share information about their accounts with third party applications or websites. It has been obsoleted by OAuth 2.0 (RFC 6749)

184 questions
0
votes
1 answer

Callback URL not calling completionHandler

I’m trying to use ASWebAuthentication to facilitate the authentication process with Oauth 1.0. After the user enters their credentials and approves my application, oauth provider uses the redirect_url I passed in, com.me.appName:/returnToApp and the…
The Swift Coder
  • 390
  • 3
  • 13
0
votes
0 answers

What does \ mean in Spring Security Roles Hierarchy Expression?

security: jwt: issuer: "https://localhost.com" rolesHierarchyExpression: ROLE_FATHER > ROLE_LORD \ ROLE_VASSAL > ROLE_HUMBLE_SERVANT ROLE_KNIGHT > ROLE_HUMBLE_SERVANT ... I was wondering in the application yml, what does \ mean?…
devdev
  • 55
  • 7
0
votes
1 answer

Schoology API OAuth 1.0 throwing 404 error while calling auth/authorize endpoint

I am using schooly API which follows OAuth 1.0 and following this documentation: https://developers.schoology.com/api-documentation/authentication#toc-item-3 I am able to get request token using this endpoint:…
Tushar Nikam
  • 594
  • 4
  • 13
0
votes
1 answer

Spring Security: OAuth Stuck in a redirect loop before getting access token, but no pages beside initial page is protected

I have a Spring Boot application that is bundled with React for the front-end. React is a single-page application, served at http://localhost:8080/. It will take any page changes and update the local browser URL to look like it's changed to a new…
Matthew Holt
  • 149
  • 1
  • 11
0
votes
1 answer

How to make a POST call using Scribe and fetch data having OAuth 1.0 Authentication in Java?

I have a requirement to make a post-call to a URL which has OAuth 1.0 authentication. I am pretty new to all these. From my research, I got to know about Scribe in Java, but I can find only Get calls using Scribe. I already have consumerKey and…
Shinchan
  • 81
  • 2
  • 17
0
votes
1 answer

Configuring 3-legged OAuth 1.0 in Spring Boot via Java Config (not xml)?

Trying to configure both 3-legged and 2-legged authentication with OAuth 1.0(a) and Spring Boot via Java Configuration (not using XML). Does anyone have any examples/tutorials for a Java-based configuration for either the 2 or 3 legged…
Matthew Holt
  • 149
  • 1
  • 11
0
votes
1 answer

Twitter Oauth 1.0 Signature Creation, how to convert "binary string" to base64

As of right now, I am in the process of creating a signature for OAuth 1.0 for Twitter. Im following this. I've ran into a small problem at the end. They have 84 2B 52 99 88 7E 88 7602 12 A0 56 AC 4E C2 EE 16 26 B5 49 And they manage to…
DavidGetter
  • 349
  • 3
  • 12
0
votes
1 answer

Creating signature hmac-sha1 in rails for magento integration

So I'm trying to create a signature to access Magento APIs via Integration but I don't get a valid oauth signature (Magento uses oauth1). On using the same timestamp and nonce in postman I get the proper oauth signature. Why doesn't this produce a…
0
votes
2 answers

using Jira Rest API from another Server

I am having a Rest API and I need to gather some informations from the Jira Rest API, but with the permissions of the user who has the current request of my Rest API. First I tried to follow this guide, but it requires verification over a link. Is…
Safari
  • 3,302
  • 9
  • 45
  • 64
0
votes
1 answer

How do I get RestSharp not to add oauth_callback parameters to the Authentication header

I'm trying to connect to a finicky API using RestSharp. The API uses OAuth1.0 and on the initial Request Token requires oauth_callback parameter ONLY in the query and not in the Authentication Header (I have confirmed this with Postman). When I…
Robert McCabe
  • 495
  • 1
  • 4
  • 21
0
votes
0 answers

Application that uses another for authentication - anyway to circumvent using their login page?

I'm writing an application (AppA) that relies on another application (AppB) to verify authentication (since ultimately AppA runs utilities against AppB - and is used by users of AppB). AppB implements OAuth 1.0a. We can use OAuth to authenticate…
Matthew Holt
  • 149
  • 1
  • 11
0
votes
0 answers

Signature OAuth 1.0 invalid caracter

I am using the implementation example for two-legged authentication. Based on the Absolute minimum code to get a valid oauth_signature populated in Java or Groovy? implementation. However, I have a problem when the secret key has the character "#",…
0
votes
1 answer

Powershell OAuth 1.0 'one-legged' authentication with HMAC-SHA1 fails

I'm trying to write a Powershell script so I can get data from a web API that uses 'one-legged' (this means that you only have the consumer key (username) and consumer secret (password) ) OAuth1.0 authentication. I've studied the OAuth1.0 docs…
neveskiet
  • 3
  • 2
0
votes
2 answers

Invalid nonce and timestamp Garmin access token API response using oauthSwift

I am trying to connect Garmin with my app. I have authToken and verifier but when I call https://connectapi.garmin.com/oauth-service/oauth/access_token API I get "invalid nonce and timestamp response. This is code below to make my signature header …
0
votes
1 answer

How can I generate oauthSignature?

I want to use twitter API. So I need some GET and POST methods. I have consumer Key, Consumer Secret, Access Token and Token Secret keys but I want to generate oauth_nonce and oauth_timestamp according to HMAC-SHA1 signature method. I found a source…
Alperen ARICI
  • 204
  • 6
  • 13