How to generate OAuth signature with php for Twitter API?

Question

Actually it is not a php question it's more about OAuth. I'm trying to understand how to generate the OAuth sign key. I read the Twitter Docs and tried the example, but I couldn't understand how to use the SHA1.

Should I use SHA1 on the base string with or without the secret_key? I tried many variations but the sign key was different form the one in the example.

This is my code:

function request_token(){

    $headers = 'POST&';
    $headers .= urlencode('https://api.twitter.com/oauth/request_token');
    $headers .= '%26oauth_callback%3d'.urlencode($this->oauth_callback);
    $headers .= '%26oauth_consumer_key%3d'.urlencode($this->oauth_consumer_key);
    $headers .= '%26oauth_nonce%3d'.urlencode($this->oauth_nonce);
    $headers .= '%26oauth_signature_method%3d'.urlencode($this->oauth_signature_method);
    $headers .= '%26oauth_timestamp%3d'.urlencode($this->oauth_timestamp);

    $request_token_url = 'http://api.twitter.com/oauth/request_token?';
    $sha = sha1($headers);
    $url = $request_token_url.$sha.$this->consumer_secret.'&';

    $ch = curl_init();
    curl_setopt($ch,CURLOPT_URL,$url);
    curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,2);
    curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
    curl_setopt($ch,CURLOPT_HTTPHEADER,$headers);
    curl_setopt($ch, CURLOPT_POST      ,1);
    curl_setopt($ch,CURLOPT_PUT,true); 
    curl_setopt($ch, CURLOPT_HEADER, 1);

    $result = curl_exec($ch);
    curl_close($ch);
    return $result;

}

Thanks

Well, for starters, replace all those "+=" with ".=". The "." operator is used for concatenation in PHP. — pop850
– pop850, Commented Aug 9, 2010 at 0:36

abraham · Accepted Answer · 2016-01-05 16:10:28Z

5

I would recommend using Abraham's Open Source OAuth solution rather than trying to write your own.

(GitHub)

edited Jan 5, 2016 at 16:10

abraham

48.2k10 gold badges108 silver badges158 bronze badges

answered Aug 9, 2010 at 15:53

Dead account

20k13 gold badges54 silver badges82 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Community · Accepted Answer · 2017-05-23 12:13:38Z

1

You may want to see this working solution another twitter oAuth cURL access token request that fails

edited May 23, 2017 at 12:13

CommunityBot

11 silver badge

answered Sep 20, 2010 at 19:20

Tomasz Dobrzyński

1611 silver badge3 bronze badges

Collectives™ on Stack Overflow

How to generate OAuth signature with php for Twitter API?

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related