Plaintext Signature Method

[Andreas Neubert]

Hi,

the Service I'm trying to connect to is using the Plaintext Signature
Method ... is this method supported by GTM-Oauth? Haven't found a way
to use another signature method than MAC_SHA1?

[Greg Robbins]

I never envisioned that a serious API provider would use plaintext. 

You should be able to add code for it to GTMOAuthAuthentication's signatureForParams:request: method.

[Marc Hedlund]

I believe plaintext was added to be useful over SSL (when you want OAuth to handle token flow but not security).

That fits if you believe OAuth signatures are a half-way reimplementation of SSL (and that half-way security is not security).

-M

[Greg Robbins]

If requests are sent with SSL, the provider should be using OAuth 2 now.

[Marc Hedlund]

I agree.

-M