Hi,

I am using a custom OAuth 1.0 code which works fine with Flickr, Twitter and others. But when I try to request a request token for SmugMug I get this error:

{"stat":"fail","method":"smugmug.auth.getRequestTo ken","code":35,"message":"invalid signature"}

Probably I am missing some parameter or using something wrong. The string over which the signature is created using "consumerSecret+&" is

GET&https%3A%2F%2Fapi.smugmug.com%2Fservices%2Fapi %2Fjson%2F1.3.0%2F&method%3Dsmugmug.auth.getReques Token%26oauth_consumer_key%3D4v0l1H1696I0k7EpGfyfG fSjnI2YIr4B%26oauth_nonce%3D1a3b4f53c6458f0748a7a5 1e90c3a404%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1344863322%26oauth_versio n%3D1.0

resulting in the final URL including the signature:

https://api.smugmug.com/services/api/json/1.3.0/?method=smugmug.auth.getRequestToken&oauth_consume r_key=4v0l1H1696I0k7EpGfyfGfSjnI2YIr4B&oauth_nonce =1a3b4f53c6458f0748a7a51e90c3a404&oauth_signature_ method=HMAC-SHA1&oauth_timestamp=1344863322&oauth_version=1.0& oauth_signature=nD9BeB1HiiCNhTvAzGcingSQHEE%3D

The generated signature is correct when using my consumer secret (not shown here). Can anyone give a hint what might be wrong?

Regards,

Interestingly the finale url with the signature works when entered in the Firefox address bar, but it does not work if I send it through sockets in my app. What could be the problem resp. what might Firefox do while transmitting the url?

Found the solution. The url was double encoded by the socket implementation.