Open
Description
The way WP-API/OAuth1 constructs the OAuth1 signature does not conform to the OAuth1 specification, making it impossible to use WP-API with this OAuth1 plugin.
For example, the parameter key and value should be rawurlencode() separately, not after the entire string has been constructed (as this'll encode "=" to "%3D"). The same goes for multidimensional arrays, it should not use [ or ] but the encoded version. The separator of these parameters should also not be encoded (at this stage).
The final string to sign ($string_to_sign) should now rawurlencode() the request URI and query string (the parameters).
Pull request to follow
Metadata
Metadata
Assignees
Labels
No labels