c# - twitter 未经授权 401 c# oauth/request_token

Question

我这里有一些代码，但我收到错误 401 未经授权。我已经用 Twitter 框检查了登录。

public async Task get_Oauth_token_TaskAsync()
    {


        //variables for action
        string oauth_nonce;
        string oauth_callback;
        string oauth_signature_method;
        string oauth_timestamp;
        string oauth_consumer_key;
        string oauth_signature;
        string oauth_version;
        string req_url;
        //set values to variables
        var dt = DateTime.Now;
        var ticks = dt.Ticks;
        var seconds = ticks / TimeSpan.TicksPerSecond;
        oauth_timestamp = seconds.ToString();
        oauth_callback = "http://www.localhost:55593/TwitterSync.aspx";
        oauth_nonce = Convert.ToBase64String(Guid.NewGuid().ToByteArray()).Substring(0, 16).ToString(); //random string
        oauth_signature_method = "HMAC-SHA1";
        oauth_consumer_key = "xxxx";
        oauth_version = "1.0";
        req_url = "https://api.twitter.com/oauth/request_token";
        oauth_signature = create_auth_Signature_Task(oauth_nonce,oauth_callback,oauth_signature_method,oauth_timestamp,oauth_consumer_key,oauth_version,req_url);

        ///action
        HttpWebRequest request = (HttpWebRequest)WebRequest.Create(req_url);
        request.Method = "POST";
        request.UserAgent = "themattharris' HTTP Client";
        request.Host = "api.twitter.com";

        request.Headers.Add(HttpRequestHeader.Authorization, "OAuth oauth_callback = \"" + Uri.EscapeDataString(oauth_callback) + "\"" + ",oauth_consumer_key = \"" + oauth_consumer_key + "\",oauth_nonce = " + "\"" + oauth_nonce + "\", oauth_signature = \"" + oauth_signature + "\", oauth_signature_method = \"HMAC-SHA1\", oauth_timestamp = \"" + oauth_timestamp + "\", oauth_version = \"1.0\"");


        WebResponse response = await request.GetResponseAsync();
        Stream str = response.GetResponseStream();
        StreamReader reader = new StreamReader(str);
        dynamic resp = reader.ReadToEndAsync();

    }

    private string create_auth_Signature_Task(string oauth_nonce, string oauth_callback,
       string oauth_signature_method, string oauth_timestamp, string oauth_consumer_key, string oauth_version, string req_url)
    {
        string oauth_nonce_enc = Uri.EscapeDataString(oauth_nonce);
        string oauth_callback_enc = Uri.EscapeDataString(oauth_callback);
        string oauth_signature_method_enc = Uri.EscapeDataString(oauth_signature_method);
        string oauth_timestamp_enc = Uri.EscapeDataString(oauth_timestamp);
        string oauth_consumer_key_enc = Uri.EscapeDataString(oauth_consumer_key);
        string oauth_version_enc = Uri.EscapeDataString(oauth_version);
        string req_url_enc = Uri.EscapeDataString(req_url);
        string secret = "xxxx";
        string signature_base = "POST&" + req_url_enc + "&" + Uri.EscapeDataString("oauth_consumer_key=" + oauth_consumer_key_enc + "&oauth_nonce=" + oauth_nonce + "&oauth_signature_method=" + oauth_signature_method_enc + "&oauth_timestamp=" + oauth_timestamp_enc + "&oauth_version=" + oauth_version_enc);


        return ShaHash(signature_base, secret);
    }

    private string ShaHash(string value, string key)
    {
        using (var hmac = new HMACSHA1(Encoding.UTF32.GetBytes(key)))
        {
            return ByteToString(hmac.ComputeHash(Encoding.UTF32.GetBytes(value)));
        }
    }

    static string ByteToString(IEnumerable<byte> data)
    {
        return string.Concat(data.Select(b => b.ToString("x2")));
    }

我按照这个page做了一切。现在我迷失了，任何想法为什么它不起作用？

Answer 1

您没有正确计算 oauth_timestamp。这应该按 Unix 时间计算，即自 1970 年 1 月 1 日 00:00:00 UTC 以来的秒数。

int unixTimestamp = (int)DateTime.UtcNow.Subtract(new DateTime(1970, 1, 1)).TotalSeconds;

或使用.NET 4.6

long unixTimestamp = DateTimeOffset.UtcNow.ToUnixTimeSeconds();

此外，用于创建签名的签名 key 应该是百分比编码的消费者 secret 和百分比编码的 token secret 的串联，并用“&”号连接。在获取请求 token 的情况下， token secret 尚不可知，因此您应该仅使用消费者 secret ，后跟一个与号(&)。

var signingKey = oauth_consumer_key_enc + "&";

最后，在计算哈希值后，您应该返回 Base64 编码的字符串，以便您的函数变为:

private string ShaHash(string value, string signingKey)
{
  using (var hmac = new HMACSHA1(Encoding.ASCII.GetBytes(signingKey)))
  {
    return Convert.ToBase64String(hmac.ComputeHash(Encoding.ASCII.GetBytes(value)));
  }
}