OBP-API icon indicating copy to clipboard operation
OBP-API copied to clipboard

Invalid signature problem

Open juan-ee opened this issue 7 years ago • 3 comments
trafficstars

I follow step by step this tutorial OAuth-1.0-Server to get the request token but I can't.

Assuming that my oauth_consumer_key=123 and my consumer_secret=456. My request would be the next:

POST /oauth/initiate HTTP/1.1
Host: api.openbankproject.com
Authorization: OAuth
oauth_callback=oob,
oauth_consumer_key="123",
oauth_signature_method="HMAC-SHA256",
oauth_timestamp="1522987628",
oauth_nonce="ErFKKs"

So, I encode the parameters in this way (Following the instructions):

  • First, the http method: POST&

  • Then, the base string URI encoded: POST&https%3A%2F%2Fapi.openbankproject.com&

  • Finally, I get the base string after normalizing the request parameters according to Section 3.4.1.3.2: POST&https%3A%2F%2Fapi.openbankproject.com&oauth_callback%3Doob%26oauth_consumer_key%3D123%26oauth_nonce%3DErFKKs%26oauth_signature_method%3DHMAC-SHA256%26oauth_timestamp%3D1522987628

  • The secret is created by the concatenation of consumer_secret and oauth_consumer_key in this way: 456&123 (consumer_secret&oauth_consumer_key)

  • So, if I sign the base string with the secret 456&123 using HMAC-SHA256 I get: 9a055becbf91403ec0ecc73f574862a7c9e77fcd27650ec5a530fbbfabe1f948

  • And after encoding to Base64 I get: OWEwNTViZWNiZjkxNDAzZWMwZWNjNzNmNTc0ODYyYTdjOWU3N2ZjZDI3NjUwZWM1YTUzMGZiYmZhYmUxZjk0OA==

And it doesn't work !!! I cannot get my request token, my signature is wrong. Am I doing something wrong ? Please, I need help

juan-ee avatar Apr 06 '18 06:04 juan-ee

http://obp.sckhoo.com/This is a really good example for you. Can you try it first ?

hongwei1 avatar May 07 '18 19:05 hongwei1

Hi, our team are having issues requesting the token, can you help pls?

StephyW avatar May 27 '19 08:05 StephyW

I have the same problem too, can you help me please?? Thanks in advance

Dariel90 avatar Jan 20 '22 21:01 Dariel90