python-oauth2
python-oauth2 copied to clipboard
URLs are not normalised properly
trafficstars
According to http://oauth.net/core/1.0a/#rfc.section.9.1.2, URLs must be normalised before using for signatures.
To fix it, it seems enough to change http://github.com/simplegeo/python-oauth2/blob/master/oauth2/init.py#LID292 to read:
self.normalized_url = urlparse.urlunparse((scheme.lower(), netloc.lower(), path, None, None, None))
Otherwise it will break when using URLs like HTTP://Example.com/foo/bar
@joestump might see if we can get #133 to include changes to close this?
@jaitaiwan this is a separate issue from #133, but related.
Sorry yes that's what I meant.