Home/ Questions/Q 8935797
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-15T10:04:31+00:00

I’m developing an ecommerce iOS app by using magento api. Currently I’m trying to

  • 0

I’m developing an ecommerce iOS app by using magento api. Currently I’m trying to request a token by using oAuth authentication.

Im using the following headers and they parameters for authenticate the user.

Request url =
http://beta.localhost.com/oauth/initiate?oauth_callback=‘http://localhost/testapp‘

OAuth realm=”http://beta.localhost.com/”,
oauth_consumer_key=”pr9vx4i46lc8jv8mmiu6z2w50p9an43x”,
oauth_nonce=”8QSHUZFRWRC5VGN3″, oauth_signature_method=”HMAC-SHA1″,
oauth_timestamp=”1354356514″, oauth_version=”1.0″,
oauth_signature=”ucKs4DyFbKv6MJ1l2%2Fx4NvF819A%3D”

im getting error:
oauth_problem=signature_invalid&debug_sbs=szeWMR2jNONabHyS3Ui7FIF3iPc=

I’ve tried everything same like twitter authentication, but im struggling with same problem

And also I’ll try to include those methods into advanced rest client, but im getting the different errors message

My Rest Client Response page screenshot.

enter image description here
enter image description here

Help me to continue this magento api by receiving the token for further steps.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    The issue is that the OAuth signature is wrong, which is clearly indicated by Magento error response.

    Debugging the signature process is quite a hard process for it to be done via StackOverflow questions. The best way for you to find and fix the error is to do it locally on your own computer. You need to go through the way Magento composes signature (check Zend_Oauth_Http_Utility::sign() method, which will lead you to the Zend_Oauth_Signature_Hmac class) and compare the process step by step with the one at the iOS side. This will help you to find the difference.

    Most often such an issue arises because of three reasons:

    1. Wrong order of data parts (in current case – your ‘oauth_*’ parameters), processed to get the signature.
    2. Mistake in signature algorithm, when implemented by oneself
    3. Wrong encoding done in order to convert the binary signature to a string and pass it via HTTP

    Comparing the Magento and iOS processes and their interim results, will help you find the step, where they start to differ. Thus you will be able to understand, what needs to be fixed.

    • 0