Unable to use https for oauth
Unable to use https for oauth
| Issue ID: | 3274 |
| Issue Category: | security |
| Component: | api |
| Priority: | normal |
| Status: | active |
| Assigned: | Unassigned |
| Version: | 0.9 |
Forgive me if there is an existing issue about this, I searched but didn't find anything.
I've been testing out the api trying to use oauth to authenticate with identi.ca. I registered my "app" with identi.ca and tried to use the Request token URL and Access token URL that are given. These urls are https.
When ever I attempt to use them i receive "invalid signature". Even when explicitly setting the signature method to HMAC_SHA1. If I use http addresses the api works.
I'm using the simplegeo oauth2 python library. This could be a bug with the library but it seems to work fine with twitter.

Updates
#1
Confirmed here too, using Perl's Net::OAuth.
You can also subscribe to the
RSS feed for updates to this issue.