GET /v2/object/get?objectId=movies/slumdog_millionaire/danny_boyle
HTTP/1.1
Authorization: OAuth oauth_signature_method="HMAC-SHA1",
oauth_consumer_key="ab900d9ba1e5d3466a166a3bc1c9f285",
oauth_version="1.0", oauth_timestamp="1312958280",
oauth_nonce="20799",
oauth_token="Hf7FX5WEtQGkGNza7hA4SPeizHrb_j8sUK2pLCT9V795OMR"uMU4NKFpOH19CQ ol"8NGPQMZ"BWOZfISFx9cetjN2zio9wIIui7z8J3W4LN"RN6SWmbMZQatwQjMVo3uURtGtUc-1 134975612",
objectId="movies/slumdog_millionaire/danny_boyle",
oauth_signature="%2Bigzwc5XHQj28nX0fpqmEDB4juA%3D"
Connection: Keep-Alive
Accept-Encoding: gzip
Accept-Language: en-US,*
User-Agent: Mozilla/5.0
Host: api.getglue.com

HTTP/1.0 401 Unauthorized
Date: Wed, 10 Aug 2011 06:38:04 GMT
WWW-Authenticate: OAuth realm="http%3A%2F%2Fapi.getglue.com",
oauth_signature="%2Bigzwc5XHQj28nX0fpqmEDB4juA%3D",
oauth_signature_base_string="GET%26http%253A%252F%252Fapi.getglue.com
%252Fv2%252Fobject%252Fget%26oauth_consumer_key
%253Dab900d9ba1e5d3466a166a3bc1c9f285%2526oauth_nonce
%253D20799%2526oauth_signature_method%253DHMAC-SHA1%2526oauth_timestamp
%253D1312958280%2526oauth_version%253D1.0%2526objectId%253Dmovies
%25252Fslumdog_millionaire%25252Fdanny_boyle%2526objectId%253Dmovies
%25252Fslumdog_millionaire%25252Fdanny_boyle",
oauth_problem="signature_invalid", oauth_signature_method="HMAC-SHA1"
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Content-Length: 530
X-Cache: MISS from Dycode
Connection: keep-alive

oauth_signature=%2Bigzwc5XHQj28nX0fpqmEDB4juA
%3D&oauth_signature_base_string=GET%26http%253A%252F
%252Fapi.getglue.com%252Fv2%252Fobject%252Fget%26oauth_consumer_key
%253Dab900d9ba1e5d3466a166a3bc1c9f285%2526oauth_nonce
%253D20799%2526oauth_signature_method%253DHMAC-SHA1%2526oauth_timestamp
%253D1312958280%2526oauth_version%253D1.0%2526objectId%253Dmovies
%25252Fslumdog_millionaire%25252Fdanny_boyle%2526objectId%253Dmovies
%25252Fslumdog_millionaire
%25252Fdanny_boyle&oauth_problem=signature_invalid&oauth_signature_method=H MAC-
SHA1

Any suggestions ?

Thanks,

Arif

Hi Arif,

What library are you suing to sign your requests? Why is oauth_token not
encoded but oauth_signature is?

Here is my dump using your consumer key and token.

request url: http://api.getglue.com/v2/object/get?oauth_version=1.0&oauth_nonce=1b...
OAuthRequest Object
(
    [parameters:OAuthRequest:private] => Array
        (
            [oauth_version] => 1.0
            [oauth_nonce] => 1b8d8156f5b19c0db6c41141f27b1f0c
            [oauth_timestamp] => 1312992940
            [oauth_consumer_key] => ab900d9ba1e5d3466a166a3bc1c9f285
            [objectId] => movies/slumdog_millionaire/danny_boyle
            [oauth_token] =>
Hf7FX5WEtQGkGNza7hA4SPeizHrb_j8sUK2pLCT9V795OMR"uMU4NKFpOH19CQol"8NGPQMZ"BW OZfISFx9cetjN2zio9wIIui7z8J3W4LN"RN6SWmbMZQatwQjMVo3uURtGtUc-1134975612
            [oauth_signature_method] => HMAC-SHA1
            [oauth_signature] => zpTdSfGJI+kn4w0tmKjYQlzeAqg=
        )

    [http_method:OAuthRequest:private] => GET
    [http_url:OAuthRequest:private] =>
http://api.getglue.com/v2/object/get?objectId=movies/slumdog_milliona...
    [base_string] =>
GET&http%3A%2F%2Fapi.getglue.com%2Fv2%2Fobject%2Fget&oauth_consumer_key%3Da b900d9ba1e5d3466a166a3bc1c9f285%26oauth_nonce%3D1b8d8156f5b19c0db6c41141f27 b1f0c%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1312992940%2 6oauth_token%3DHf7FX5WEtQGkGNza7hA4SPeizHrb_j8sUK2pLCT9V795OMR%2522uMU4NKFp OH19CQol%25228NGPQMZ%2522BWOZfISFx9cetjN2zio9wIIui7z8J3W4LN%2522RN6SWmbMZQa twQjMVo3uURtGtUc-1134975612%26oauth_version%3D1.0%26objectId%3Dmovies%252Fs lumdog_millionaire%252Fdanny_boyle
)

On Wed, Aug 10, 2011 at 2:51 AM, arif setiawan <n.arif.setia...@gmail.com>wrote:

GetGlue:   http://getglue.com/TengFactor
LinkedIn:  http://www.linkedin.com/in/karenteng

We are hiring! http://getglue.com/ <http://getglue.com/about>jobs

I am using kqoauth http://www.d-pointer.com/solutions/kqoauth, I have
using it for twitter API.
I can see that in base_string oauth_token is not included.
Thanks for the pointer, I will investigate this.

Arif

I had the same problem,  i found the problem in the header
autorization item.

The oAuth_Token have a double quote(") inside.  this little thing
corrupt the autorization.

The solution i found for this was encode the token just for the
autorization header.

Hope this solution work for you.

On Aug 10, 7:09 pm, arif setiawan <n.arif.setia...@gmail.com> wrote: