Invalid signature, why so? can anyone point out whats wrong with my approach?

sujit1779

Hi

I am not able to get any results, each time I am getting error "invalid signature". I have gone crazy so I am giving all info in the hope that someone may help me out. I have attached screenshots for better understanding. Can anyone point me what error I am doing?

app name : picbackman
key: 9kvIlPHqB0j5Un4HNnkBKKrkxUkx1pLt
secret: fed2e1859c773ac3192e25a7e926fd5e

===============================
Step 1 >

I enter this in browser

http://api.smugmug.com/services/oauth/getRequestToken.mg?oauth_consumer_key=9kvIlPHqB0j5Un4HNnkBKKrkxUkx1pLt&oauth_nonce=7254741&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1324547272&oauth_signature=DxaHPB8PKk+MEyP+z6b0GS6BPmU=

In response I get this
oauth_token=831b3a887399dd53152bb3c6c6fb7442&oauth_token_secret=5c90b1277d708d3f5e19868f823aab2e2cf99799d2b2307c9d9b33ed441235af

http://i39.tinypic.com/ff8dtu.jpg

===========================================

Step 2 :

https://secure.smugmug.com/services/oauth/authorize.mg?oauth_consumer_key=9kvIlPHqB0j5Un4HNnkBKKrkxUkx1pLt&oauth_nonce=7254741&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1324547272&oauth_token=831b3a887399dd53152bb3c6c6fb7442&oauth_signature=9oL6iGwoBoOYpTCAdWFq13VoKOU=&Access=Full&Permissions=Add


http://www.picbackman.com/?oauth_consumer_key=9kvIlPHqB0j5Un4HNnkBKKrkxUkx1pLt&oauth_nonce=7254741&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1324547272&oauth_token=831b3a887399dd53152bb3c6c6fb7442&oauth_signature=9oL6iGwoBoOYpTCAdWFq13VoKOU=&Access=Full&Permissions=Add

http://i41.tinypic.com/2qa4nxs.jpg

http://i40.tinypic.com/245k65z.jpg
====================================================

Step 3 >

http://api.smugmug.com/services/oauth/getAccessToken.mg?oauth_consumer_key=9kvIlPHqB0j5Un4HNnkBKKrkxUkx1pLt&oauth_nonce=7254741&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1324547272&oauth_token=831b3a887399dd53152bb3c6c6fb7442&oauth_signature=FDKlldGxQvTlF7F5cmSLs86cgzY=

In response I get

oauth_token=610803fc804ae4842deefac0c91a3282&oauth_token_secret=eebbeaae56ff00566ff0ae63ebcaea562c572c7fc7b70c6414a57140164839ed

http://i41.tinypic.com/qxt4hz.jpg

Questing : is the above token a "ACCCESS TOKEN" (one which never expires)?

=================================
Step 4 : now I am trying to call one of the API's say (smugmug.users.getTree)

this is the url I am putting in browser

https://secure.smugmug.com/services/api/rest/1.3.0/?method=smugmug.featured.albums.get&oauth_consumer_key=9kvIlPHqB0j5Un4HNnkBKKrkxUkx1pLt&oauth_nonce=7254741&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1324547272&oauth_token=610803fc804ae4842deefac0c91a3282&oauth_signature=IGSyYO+vH93wZjDM0WQcHjECxcQ=

first it gives timestamp error,
http://i40.tinypic.com/2449zsh.jpg

then i change timestamp and nonce, but i get "invalid signature" error.
http://i42.tinypic.com/2d99s0x.jpg


=========================================

http://i40.tinypic.com/m9c86t.jpg

can someone help me out, I need this. I have been trying for the last 2 days. What error I am doing?

Thanks.