I am attempting to use the etrade api which unfortunately uses oauth1.I have spent over a day trying to authorize. I wonder if anyone can look at my values and see the problem.
parameterString
include_entities=true&
oauth_callback=oob&
oauth_consumer_key=a64408d1348cc0b2b7c3dbac058fd3cc&
oauth_nonce=BpLnfgDsc2WD8F2qNfHK5a84jjJkwzDkh9h2fhfUVuS9jZ8u&
oauth_signature_method=HMAC-SHA1&oauth_timestamp=1659709080&
oauth_token=&oauth_version=1.0&
status=Hello%20Ladies%20%2B%20Gentlemen%2C%20a%20signed%20OAuth%20request%21
signatureBase
GET&https%3A%2F%2Fapisb.etrade.com%2F
oauth%2Frequest_token&
include_entities%3Dtrue%26
oauth_callback%3Doob%26
oauth_consumer_key%3Da64408d1348cc0b2b7c3dbac058fd3cc%26
oauth_nonce%3DBpLnfgDsc2WD8F2qNfHK5a84jjJkwzDkh9h2fhfUVuS9jZ8u%26
oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1659709080%26
oauth_token%3D%26
oauth_version%3D1.0%26
status%3DHello%2520Ladies%2520%252B%2520Gentlemen%252C%2520a%2520signed%2520
OAuth%2520request%2521
signingKey
1550b6791d366b0dd62949cfb4ef7b85fec0d4d2144e14efb915dae00509f639&
signature
qjbsiY0zp1J7SSOR0UoRpbqgTVs=
authHeader
OAuth oauth_callback="oob",
oauth_consumer_key="a64408d1348cc0b2b7c3dbac058fd3cc", oauth_nonce="BpLnfgDsc2WD8F2qNfHK5a84jjJkwzDkh9h2fhfUVuS9jZ8u", oauth_signature="qjbsiY0zp1J7SSOR0UoRpbqgTVs%3D",
oauth_signature_method="HMAC-SHA1",
oauth_timestamp="1659709080",
oauth_token="",
oauth_version="1.0"
response:
Www-Authenticate: OAuth realm=https://etws.etrade.com/,oauth_problem=signature_invalid
I’m not obscuring anything as this is just a sandbox authorization.
Carriage returns have been inserted to make these easier to read.
BTW, I am able to get a token using Postman. Even though I don’t specify the signature, Postman must be creating one because it works. Agh, I turned off the oauth_signature and retried and it failed. Turned it back on and it still fails. It says:
oauth_acceptable_timestamps=1659719338-1659722938
when I have the timestamp set to: 1659721096
Even though my timestamp is in that range.