OAuth,request_token上的403响应错误

| 尝试获取HTTP 403时收到HTTP响应错误 请求令牌。 我已经检查了我的基本弦的演唱过程,这是正确的。如果 我在Twitter开发人员站点上使用默认密钥,它生成相同的密钥 结果显示在网站上,所以我可以肯定。 任何见解将不胜感激!
var reqURL = \'https://api.twitter.com/oauth/request_token\';
var reqNonce = getNonce();      
var reqTimeStamp = getTimeStamp();  
var reqSignatureMethod = \'HMAC-SHA1\';
var reqOauthVersion = \'1.0\';
var reqConsumerKey = \'ySBPkqxaRlheQKFwejMpqg\';
var reqConsumerSecret = \'______________&\'  // note the & at the end..
var reqCallback = \'http%3A%2F%2Flocalhost%3A3005%2Fthe_dance%2Fprocess_callback%3Fservice_provider_id%3D11\'
var reqQuery = \'oauth_callback=\' + reqCallback + \'&oauth_consumer_key=\' + reqConsumerKey + \'&oauth_nonce=\' + reqNonce + \'&oauth_signature_method=\' + reqSignatureMethod + \'&oauth_timestamp=\' + reqTimeStamp + \'&oauth_version=\' + reqOauthVersion;
var reqBaseString = \'POST&\' + reqURL + \'&\' + encodeURIComponent(reqQuery);
var reqSignature = b64_hmac_sha1(reqConsumerSecret, reqBaseString);
var reqSignature = reqSignature + \'=\';
var request = new XMLHttpRequest();
request.onreadystatechange = function(data) {
    if (request.readyState == 4) {

        // Good response, got the xml file
        if (request.status == 200) {
            alert (\'good response\');
        }
    }
};

// alert (reqURL);
// alert (reqBaseString);

var oauthParams = encodeURIComponent(\"OAuth oauth_callback=\\\"\" + reqCallback + \"\\\",oauth_consumer_key=\\\"\" + reqConsumerKey + \"\\\",oauth_nonce=\\\"\" + reqNonce + \"\\\",oauth_signature_method=\\\"\" + reqSignatureMethod + \"\\\",oauth_timestamp=\\\"\" + reqTimeStamp + \"\\\",oauth_version=\\\"1.0\\\",oauth_signature=\\\"\" + reqSignature + \"\\\"\");

request.open(\"POST\", reqURL, true);
request.setRequestHeader(\"Accept\", \"text/plain, */*\");
request.setRequestHeader(\"Connection\", \"Keep-Alive\");
request.setRequestHeader(\"Authorization\", oauthParams);
request.send();
    
已邀请:
        我发现非常有用的是仅获取与cnauroth建议的Netflix OAuth Test一起使用的原始HTTP请求,然后将其与您通过此代码段发送的内容进行比较。 OAuth是棘手的,而且不好玩,因此,如果您仅可以区分两个请求,就应该能够找到一些编码不正确或放错&的地方。     

要回复问题请先登录注册