[OAUTH-WG] Oauth signature problem

2013-09-12 Thread Sunil Pal
How to generate the correct oauth_signature in apex.Here is the code for generating oauth_nonce, oauth_timestamp and oauth_signature. But not getting the correct oauth_signature // Generate a unique combination of numbers and alphabets for oauth-nonce String nonce = String.valueOf(Crypto.getRandom

Re: [OAUTH-WG] OAuth Signature Draft Pre 00

2010-09-27 Thread Mike Jones
-- Mike From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of David Recordon Sent: Monday, September 27, 2010 9:24 AM To: Anthony Nadalin Cc: oauth Subject: Re: [OAUTH-WG] OAuth Signature Draft Pre 00 Mike and Yaron's proposal is different from Nat's though. N

Re: [OAUTH-WG] OAuth Signature Draft Pre 00

2010-09-27 Thread David Recordon
plementers to follow. But for now I think it gives a > good sense of the some of the security challenges in creating a secure token > format. > > Yaron > > > > *From:* oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] *On Behalf > Of *Nat Sakimura > *S

Re: [OAUTH-WG] OAuth Signature Draft Pre 00

2010-09-27 Thread Anthony Nadalin
: Monday, September 27, 2010 9:13 AM To: David Recordon Cc: oauth Subject: Re: [OAUTH-WG] OAuth Signature Draft Pre 00 I'm just as confused :-) I think what happened is that I posted a signature draft and then didn't follow up. Nat then very kindly agreed to help and put out a draft, but

Re: [OAUTH-WG] OAuth Signature Draft Pre 00

2010-09-27 Thread Dirk Balfanz
looks more like English and is >> easier for actual implementers to follow. But for now I think it gives a >> good sense of the some of the security challenges in creating a secure token >> format. >> >> Yaron >> >> >> >> *From

Re: [OAUTH-WG] OAuth Signature Draft Pre 00

2010-09-27 Thread Yaron Goland
The goal is to have a single unified draft. From: David Recordon [mailto:record...@gmail.com] Sent: Monday, September 27, 2010 7:00 AM To: Nat Sakimura; Yaron Goland Cc: oauth Subject: Re: [OAUTH-WG] OAuth Signature Draft Pre 00 I'm a bit confused between the relationship of Nat's I

Re: [OAUTH-WG] OAuth Signature Draft Pre 00

2010-09-27 Thread David Recordon
Yaron > > > > *From:* oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] *On Behalf > Of *Nat Sakimura > *Sent:* Tuesday, August 24, 2010 6:50 AM > *To:* oauth > *Subject:* [OAUTH-WG] OAuth Signature Draft Pre 00 > > > > Hi. > > > > It ha

Re: [OAUTH-WG] OAuth Signature Draft Pre 00

2010-09-21 Thread hdknr hidelafoglia
a secure token format. >> >>     Yaron >> >> >> >> From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of >> Nat Sakimura >> Sent: Tuesday, August 24, 2010 6:50 AM >> To: oauth >> Subject: [OAUTH-WG] OAuth Sig

Re: [OAUTH-WG] OAuth Signature Draft Pre 00

2010-09-21 Thread Anthony Nadalin
Might actually want both @ same time, so might be better to expand -Original Message- From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of hdknr hidelafoglia Sent: Tuesday, September 21, 2010 12:39 PM To: Yaron Goland Cc: oauth Subject: Re: [OAUTH-WG] OAuth Signature

Re: [OAUTH-WG] OAuth Signature Draft Pre 00

2010-09-21 Thread hdknr hidelafoglia
> Sent: Tuesday, August 24, 2010 6:50 AM > To: oauth > Subject: [OAUTH-WG] OAuth Signature Draft Pre 00 > > > > Hi. > > > > It has been a few weeks since then I volunteered to do this work. > > I have written up to this pre 00 draft then have been doing some rea

[OAUTH-WG] OAuth Signature Draft Pre 00

2010-08-24 Thread Nat Sakimura
Hi. It has been a few weeks since then I volunteered to do this work. I have written up to this pre 00 draft then have been doing some reality checks on some script languages etc. No. This pre-00 draft is far from being feature complete. I still need to copy and paste the Magic Signatures text et

Re: [OAUTH-WG] OAuth Signature

2010-07-27 Thread Nat
ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of > Dirk Balfanz > Sent: Tuesday, July 27, 2010 4:04 PM > To: Nat Sakimura > Cc: oauth > Subject: Re: [OAUTH-WG] OAuth Signature > > > > > > On Tue, Jul 27, 2010 at 3:35 PM, Nat Sakimura wrote: > > On

Re: [OAUTH-WG] OAuth Signature

2010-07-27 Thread Nat
ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of > Dirk Balfanz > Sent: Tuesday, July 27, 2010 4:04 PM > To: Nat Sakimura > Cc: oauth > Subject: Re: [OAUTH-WG] OAuth Signature > > > > > > On Tue, Jul 27, 2010 at 3:35 PM, Nat Sakimura wrote: > > On

Re: [OAUTH-WG] OAuth Signature

2010-07-27 Thread Eran Hammer-Lahav
Is someone going to turn this into an I-D anytime soon? EHL From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of Dirk Balfanz Sent: Tuesday, July 27, 2010 4:04 PM To: Nat Sakimura Cc: oauth Subject: Re: [OAUTH-WG] OAuth Signature On Tue, Jul 27, 2010 at 3:35 PM, Nat

Re: [OAUTH-WG] OAuth Signature

2010-07-27 Thread Dirk Balfanz
On Tue, Jul 27, 2010 at 3:35 PM, Nat Sakimura wrote: > On Wed, Jul 28, 2010 at 1:12 AM, Dirk Balfanz wrote: > > > > > > On Tue, Jul 27, 2010 at 12:34 AM, Nat Sakimura > wrote: > >> > >> I have a fundamental question. > >> > >> While separating signature and payload by a dot "." seems ok, > >> I

Re: [OAUTH-WG] OAuth Signature

2010-07-27 Thread Nat Sakimura
On Wed, Jul 28, 2010 at 1:12 AM, Dirk Balfanz wrote: > > > On Tue, Jul 27, 2010 at 12:34 AM, Nat Sakimura wrote: >> >> I have a fundamental question. >> >> While separating signature and payload by a dot "." seems ok, >> I still have not the answer for the question "why not make everything >> int

Re: [OAUTH-WG] OAuth Signature

2010-07-27 Thread Nat Sakimura
On Wed, Jul 28, 2010 at 5:43 AM, Dick Hardt wrote: > > > On 2010-07-27, at 12:34 AM, Nat Sakimura wrote: > >> I have a fundamental question. >> >> While separating signature and payload by a dot "." seems ok, >> I still have not the answer for the question "why not make everything >> into JSON and

Re: [OAUTH-WG] OAuth Signature

2010-07-27 Thread Dick Hardt
On 2010-07-27, at 12:34 AM, Nat Sakimura wrote: > I have a fundamental question. > > While separating signature and payload by a dot "." seems ok, > I still have not the answer for the question "why not make everything > into JSON and base64url it?". bloat from base64 encoding twice > > BTW,

Re: [OAUTH-WG] OAuth Signature

2010-07-27 Thread Dirk Balfanz
On Tue, Jul 27, 2010 at 12:34 AM, Nat Sakimura wrote: > I have a fundamental question. > > While separating signature and payload by a dot "." seems ok, > I still have not the answer for the question "why not make everything > into JSON and base64url it?". > > i.e., Right now, you are proposing:

[OAUTH-WG] OAuth Signature

2010-07-27 Thread Nat Sakimura
I have a fundamental question. While separating signature and payload by a dot "." seems ok, I still have not the answer for the question "why not make everything into JSON and base64url it?". i.e., Right now, you are proposing: base64url_encode(JSON(payload,envelope)).base64url_encode(signature