Mailing-List: contact dev-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpComponents Project" <dev@hc.apache.org>
Received-SPF: pass (nike.apache.org: domain of tmnichols@gmail.com designates
 74.125.83.51 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        b=x6Pl84ocuKIqZoJeL1e3cc94glkhG0IflaYdEEl2yquRoQNcfFFoDro3VSrLHY77R6
         aRqZf6mpS4lR6rbw1sJoQuAOAgptVGCuJq57Jq2YrpL9l/2Ee2G+69UMBSMQ3uXiKcMZ
         QFiJAqGRtAVl5+Nx/FUKiRz8BD+O+1byuWzzA=
MIME-Version: 1.0
In-Reply-To: <AANLkTi=wUHkrFGX9a77OswqXxS3=NcpM_MWCdFWF2cKu@mail.gmail.com>
References: <AANLkTi=wUHkrFGX9a77OswqXxS3=NcpM_MWCdFWF2cKu@mail.gmail.com>
Date: Thu, 9 Sep 2010 13:26:58 -0400
Message-ID: <AANLkTimj4_G7nBSOrQ3yLFe0Ld5-oXAEui6incKm65od@mail.gmail.com>
Subject: Re: AuthScheme impl for OAuth
From: Thom Nichols <tmnichols@gmail.com>
To: dev <dev@hc.apache.org>
Content-Type: multipart/alternative; boundary=001636c9236df3d150048fd6efd0

--001636c9236df3d150048fd6efd0
Content-Type: text/plain; charset=ISO-8859-1

So I'm trying to implement an AuthScheme for OAuth (actually I'm trying to
augment SignPost to work with HttpClient's AuthScheme, but anyway...)

The problem I'm running up against is when AuthScheme.authenticate(
Credentials, HttpRequest  ) is called.  The problem is, in order for the
request to be signed in OAuth, I need to know the entire request URI.  The
HttpRequest that's passed into authenticate() only has the path portion of
the URI.

Code snippet from OAuthScheme.java:
    public Header authenticate( Credentials credentials, HttpRequest request
) throws AuthenticationException {
        System.out.println( "AuthScheme request: " + request.getURI() );
        // ... sign the request
    }

So, calling getURI on my original request shows:
http://twitter.com/statuses/update.xml
(get 401 response, authScheme handler kicks in...)
from the authenicate method, I get printed:
AuthScheme request: /statuses/update.xml

I'm guessing this is because the request I'm getting is the 'new' request
created after the initial 401 response is returned.  I know the HttpContext
holds state information between multiple requests (like redirects and 401s)
but I don't have access to that from my AuthScheme instance.  So how can my
AuthScheme get the URI from the original request?


Thanks!
-Tom

--001636c9236df3d150048fd6efd0--