OAuth: invalid signature problem

hmm

Hi,

I am using a custom OAuth 1.0 code which works fine with Flickr, Twitter and others. But when I try to request a request token for SmugMug I get this error:

{"stat":"fail","method":"smugmug.auth.getRequestToken","code":35,"message":"invalid signature"}

Probably I am missing some parameter or using something wrong. The string over which the signature is created using "consumerSecret+&" is

GET&https%3A%2F%2Fapi.smugmug.com%2Fservices%2Fapi%2Fjson%2F1.3.0%2F&method%3Dsmugmug.auth.getRequesToken%26oauth_consumer_key%3D4v0l1H1696I0k7EpGfyfGfSjnI2YIr4B%26oauth_nonce%3D1a3b4f53c6458f0748a7a51e90c3a404%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1344863322%26oauth_version%3D1.0

resulting in the final URL including the signature:

https://api.smugmug.com/services/api/json/1.3.0/?method=smugmug.auth.getRequestToken&oauth_consumer_key=4v0l1H1696I0k7EpGfyfGfSjnI2YIr4B&oauth_nonce=1a3b4f53c6458f0748a7a51e90c3a404&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1344863322&oauth_version=1.0&oauth_signature=nD9BeB1HiiCNhTvAzGcingSQHEE=

The generated signature is correct when using my consumer secret (not shown here). Can anyone give a hint what might be wrong?

Regards,

hmm

Interestingly the finale url with the signature works when entered in the Firefox address bar, but it does not work if I send it through sockets in my app. What could be the problem resp. what might Firefox do while transmitting the url?

hmm

Found the solution. The url was double encoded by the socket implementation.