simple_oauth
simple_oauth copied to clipboard
Simply builds and verifies OAuth headers
Separate oauth style params from the params hash and inserts them into the options hash. This allows for validation of signatures that use the 'application/x-www-form-urlencoded' content-type.
following #13 I have noticed a couple other issues, all of which I've fixed by refactoring `.parse`. - a badly formed Authorization header results in the rather unuseful error `NoMethodError:...
the symbolization of arbitrary user-supplied strings is a DoS / memory exhaustion vulnerability. this patch limits the symbols which SimpleOAuth uses for keys in the .parse method to those that...
This is useful, for example, when loading consumer_key and consumer_secret from a YAML file, which creates the keys as strings rather than symbols.
Attribute keys are now the union of the keys we must have, and the keys we provided, so that extra keys in the oauth payload are not silently omitted. In...
this gem is not supporting the HMAC-SHA256 signature method