hey guys, has anyone got advice on getting TBA set up. the partial guides and stack overflow links i've found are horrendous. from what i can see, i need to send a signature over, but it isn't exactly clear how that signature is generated:

oauth_signature (required) - Credentials to verify the authenticity of the request, generated by calling your application. The Token Secret and Consumer Secret are constructed as a key to sign the request, using a supported signature method (HMAC-SHA1 or HMAC-SHA256).

is that saying just token secret and consumer secret joined as a string and encoded to sha1 for example, or are there other bits of data to go in to it