Invalid Signature errors

[David Strack]

Users of my app are beginning to get Invalid Signature errors. This
started this afternoon. Has something changed or broken with the API?

[je...@digg.com]

Hey David,

We pushed a fix where arguments were not being included in the oauth
signature base strings. If you POST a oauth request to a url with the
method (or other arguments) in the query string of the url they are
now in the signature base string.

E.g. before if you send a POST request to "http://service.digg.com/1.0/
endpoint?method=oauth.getRequestToken" the method parameter was not
being included in the signature base string. Note if you send the
method parameter in the POST data in the body, it is included in the
base string before this change.

Hope this clears things up. Let me know if you have any issues.

-jeff

[David Strack]

Thanks Jeff.

Right now I'm signing requests with the method & parameters included
in the base string and in the POST body and this is giving me an
invalid signature. Should I just pass the parameters through in the
POST body? I've been messing around with a few combinations and
haven't gotten it to work yet.

[David Strack]

Nevermind, I think I got it. Had to remove the method and other
parameters from the request URL.

[Moons]

Could you please give some details?