Mailing-List: contact dev-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpComponents Project" <dev@hc.apache.org>
Received-SPF: pass (nike.apache.org: domain of asankha.apache@gmail.com
 designates 209.85.212.179 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=sender:message-id:date:from:user-agent:mime-version:to:subject
         :references:in-reply-to:content-type:content-transfer-encoding;
        b=gXcmxpFeaP7ipYSDuRHv7UC5Llk0bo0aB+zALHwNvj6TFzYlvQWnjlpbdoVCXmfieT
         L6v+HfPnx+VE/dZzVeBv0Tx6xHcOta74m8yCQ7eGlXABtRwh8wLPPbBBT4RJXbEetedc
         O9oc9ag0VXuC9OYsDA/G961ZiynTVUtgaM3L0=
Sender: Asankha Perera <asankha.apache@gmail.com>
Message-ID: <4C89312B.1060508@apache.org>
Date: Fri, 10 Sep 2010 00:40:35 +0530
From: "Asankha C. Perera" <asankha@apache.org>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US;
 rv:1.9.1.9) Gecko/20100423 Thunderbird/3.0.4
MIME-Version: 1.0
To: HttpComponents Project <dev@hc.apache.org>
Subject: Re: AuthScheme impl for OAuth
References: <AANLkTi=wUHkrFGX9a77OswqXxS3=NcpM_MWCdFWF2cKu@mail.gmail.com>
 <AANLkTimj4_G7nBSOrQ3yLFe0Ld5-oXAEui6incKm65od@mail.gmail.com>
In-Reply-To: <AANLkTimj4_G7nBSOrQ3yLFe0Ld5-oXAEui6incKm65od@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi Tom
> So I'm trying to implement an AuthScheme for OAuth (actually I'm trying to
> augment SignPost to work with HttpClient's AuthScheme, but anyway...)
>
> The problem I'm running up against is when AuthScheme.authenticate(
> Credentials, HttpRequest  ) is called.  The problem is, in order for the
> request to be signed in OAuth, I need to know the entire request URI.  The
> HttpRequest that's passed into authenticate() only has the path portion of
> the URI.
>
> Code snippet from OAuthScheme.java:
>      public Header authenticate( Credentials credentials, HttpRequest request
> ) throws AuthenticationException {
>          System.out.println( "AuthScheme request: " + request.getURI() );
>          // ... sign the request
>      }
>
> So, calling getURI on my original request shows:
> http://twitter.com/statuses/update.xml
> (get 401 response, authScheme handler kicks in...)
> from the authenicate method, I get printed:
> AuthScheme request: /statuses/update.xml
>
> I'm guessing this is because the request I'm getting is the 'new' request
> created after the initial 401 response is returned.  I know the HttpContext
> holds state information between multiple requests (like redirects and 401s)
> but I don't have access to that from my AuthScheme instance.  So how can my
> AuthScheme get the URI from the original request?
>    
I think you are seeing the right request.. but you only see the request 
URI as your request went out that way. For example:

GET http://twitter.com/statuses/update.xml HTTP/1.1

you issued, got translated as:

GET /statuses/update.xml HTTP/1.1
Host: twitter.com

You should still be able to get the scheme, method etc from the request, 
as well as the 'Host' header. Can you check if this is correct?

cheers
asankha

-- 
Asankha C. Perera
AdroitLogic, http://adroitlogic.org

http://esbmagic.blogspot.com


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org