Support for oauth 1.0a

[Edward]

The Goodreads API appears to use Oauth 1.0 though it's not explicitly stated in the documentation. Is there a plan to use Oauth 1.0a? Specifically, libraries like Scribe don't support the older, less secure 1.0 implementation.

[Michael]

I thought it was 1.0a.



We'd add support for 2.0 first if we did want to expand it (thats not currently on our roadmap).

[Edward]

I might be wrong on the version number. Scribe chokes on the absence of oauth_verifier header. Or at least this appears to be what's happening.

[Michael]

What is scribe? Is there a url?

[Edward]

Scribe is a java oauth library:
https://github.com/fernandezpablo85/s...

[Michael]

maybe this post might be helpful?

http://www.goodreads.com/topic/show/2...


I'll check with our android guys, but we may have rolled our own oauth wrapper.

[Robert]

We use a slightly modified version of the Signpost OAuth 1.2.1.2 library, and they say it's "in conformance with the OAuth Core 1.0a standard."

I believe our modifications only correct the handling of square brackets in parameter names during signature generation.

[Edward]

Thanks for the information. I was able to get it working with a different Oauth library. It must be a limitation of Scribe or my misunderstanding of the implementation.

[Michael]

Which library?