1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
require File.expand_path('../../../oauth_case', __FILE__)
# See http://oauth.net/core/1.0/#anchor14
#
# 9.1. Signature Base String
#
# The Signature Base String is a consistent reproducible concatenation of the request elements
# into a single string. The string is used as an input in hashing or signing algorithms. The
# HMAC-SHA1 signature method provides both a standard and an example of using the Signature
# Base String with a signing algorithm to generate signatures. All the request parameters MUST
# be encoded as described in Parameter Encoding prior to constructing the Signature Base String.
#
class SignatureBaseStringTest < OAuthCase
def test_A_5_1
parameters={
'oauth_consumer_key'=>'dpf43f3p2l4k3l03',
'oauth_token'=>'nnch734d00sl2jdk',
'oauth_signature_method'=>'HMAC-SHA1',
'oauth_timestamp'=>'1191242096',
'oauth_nonce'=>'kllo9940pd9333jh',
'oauth_version'=>'1.0',
'file'=>'vacation.jpg',
'size'=>'original'
}
sbs='GET&http%3A%2F%2Fphotos.example.net%2Fphotos&file%3Dvacation.jpg%26oauth_consumer_key%3Ddpf43f3p2l4k3l03%26oauth_nonce%3Dkllo9940pd9333jh%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1191242096%26oauth_token%3Dnnch734d00sl2jdk%26oauth_version%3D1.0%26size%3Doriginal'
assert_signature_base_string sbs,parameters,'GET',"http://photos.example.net/photos"
end
# These are from the wiki http://wiki.oauth.net/TestCases
# in the section Concatenate Test Elements
def test_wiki_1_simple_with_ending_slash
parameters={
'n'=>'v'
}
sbs='GET&http%3A%2F%2Fexample.com%2F&n%3Dv'
assert_signature_base_string sbs,parameters,'GET',"http://example.com/"
end
def test_wiki_2_simple_without_ending_slash
parameters={
'n'=>'v'
}
sbs='GET&http%3A%2F%2Fexample.com%2F&n%3Dv'
assert_signature_base_string sbs,parameters,'GET',"http://example.com"
end
def test_wiki_2_request_token
parameters={
'oauth_version'=>'1.0',
'oauth_consumer_key'=>'dpf43f3p2l4k3l03',
'oauth_timestamp'=>'1191242090',
'oauth_nonce'=>'hsu94j3884jdopsl',
'oauth_signature_method'=>'PLAINTEXT',
'oauth_signature'=>'ignored' }
sbs='POST&https%3A%2F%2Fphotos.example.net%2Frequest_token&oauth_consumer_key%3Ddpf43f3p2l4k3l03%26oauth_nonce%3Dhsu94j3884jdopsl%26oauth_signature_method%3DPLAINTEXT%26oauth_timestamp%3D1191242090%26oauth_version%3D1.0'
assert_signature_base_string sbs,parameters,'POST',"https://photos.example.net/request_token"
end
protected
def assert_signature_base_string(expected,params={},method='GET',uri="http://photos.example.net/photos",message="Signature Base String does not match")
assert_equal expected, signature_base_string(params,method,uri), message
end
def signature_base_string(params={},method='GET',uri="http://photos.example.net/photos")
request(params,method,uri).signature_base_string
end
end
|
