Full OAuth request_token URL

[Fred]

I'm using vanilla JS to authenticate with OAuth. The URL I'm using returns a 401, either in my app or testing with Postman.

The format I'm using is: https://www.goodreads.com/oauth/reque.... I've also tried adding '&head=True' or '&header=True'.

What am I missing here? Thanks in advance!

[Michael]

I'm having similar issues - I'm able to get oauth_token and oauth_token_secret using the format you have above in postman, but any subsequent API calls fail.

[Fred]

@Michael, that's so annoying. Did you use head or header? And did you do a GET or POST request? I can't get either to work.

[Michael]

I tried both body and headers; I only tried GET originally (since I'm not creating or mutating an entity), but I just tried POST and got 404 (not found) instead of 401 (not authorized), so I think GET is the way to go.

[Michael]

I also tried walking through all the signature methods (SHA1, 256, plaintext) to no avail.

To be fair, I'm more of a data engineering nerd than a front-end dev, so navigating OAUTH, and using Postman, isn't second nature to me. I'll try getting it working in python over the weekend.

[Fred]

Not my bag either, thanks for the help. I got the GET working (at least once).