PlanetJupiter
09/27/2023, 1:00 PMNathan L
09/27/2023, 3:03 PMRe-reviewing the threads you sent out and a couple others, it does seem the sorting of the parameters was the problem, but not quite how we understood it. Using this site lti.tools/oauth/ I started building the authorization header, which starts off this way with the query parameters:
*first image
When those get passed to NS, it resorts them like so:
*second image
We assumed it was only the query parameters being sorted; all of them are. The parameter string then becomes:
deploy=1&oauth_consumer_key=consumerKey&oauth_nonce=ae0c76e3d9084dd&oauth_signature_method=HMAC-SHA256&oauth_timestamp=1662644098&oauth_token=token&oauth_version=1.0&script=899
And that’s successfully logging into NS and hitting the restlet with the same return as Postman:
Nathan L
09/27/2023, 3:03 PM