Ticket #69 (closed defect: fixed)
OAuth HTTP POST multipart signature check fails
| Reported by: | http://blog.nerdbank.net/ | Owned by: | http://blog.nerdbank.net/ |
|---|---|---|---|
| Priority: | major | Milestone: | v3.0.3 |
| Component: | OAuth | Version: | v3.0.0 RTW |
| Keywords: | sp | Cc: |
Description
HTTP POSTs that have a Content-Type of multipart/form-data should not be scraped for text parameter values for base signature string construction. This causes these requests to be rejected by the OAuth service provider.
Change History
Note: See
TracTickets for help on using
tickets.
![(please configure the [header_logo] section in trac.ini)](http://nerdbank.org/RP/images/logo/dotnetopenid_tiny.gif)