使用HMAC-SHA1加密創建OAuth簽名返回HTTP 401

Question

問題
您好，我需要對需要OAuth加密的API進行身份驗證。
我在正確的方向，但我相信我的簽名基礎字符串有問題。由於HMACSHA1哈希基於Key和BaseString，因此我得到了錯誤的oauth_signature。
OAuth Signing Process

到目前爲止
我已經能夠收集數據所要求的所有作品，包括：

• 消費重點
• 消費者揭祕
• 艾策斯令牌
• Acces Secret
• Sha1Hased值（基於關鍵和消息，其中，消息是簽名基本字符串）
• 簽名基本字符串

的問題
我得到一個HTTP（401錯誤請求）返回，因爲簽名無效。
說明：我很確定這是我如何建立我的簽名基礎字符串。有關我使用的API文檔的信息，請查看底部頁面。

守則

GetOAuthToken（做實際的請求）

public static string GetAuthorizationToken() 
{ 
    string TimeInSecondsSince1970 = ((int)(DateTime.UtcNow - new DateTime(1970, 1, 1)).TotalSeconds).ToString(); 
    string Nonce = System.Convert.ToBase64String(System.Text.Encoding.UTF8.GetBytes(TimeInSecondsSince1970 
    + TimeInSecondsSince1970 + TimeInSecondsSince1970)); 
    HttpWebRequest httpWebRequest = (HttpWebRequest)WebRequest.Create(GetAppleApiUrl.GetUrl(AppleApiUrl.SESSION_TOKEN)); 
    httpWebRequest.Method = "GET"; 

    string consumer_secret = Uri.EscapeDataString(Settings.SettingsManager.consumer_secret); 
    string token_secret = Uri.EscapeDataString(Settings.SettingsManager.access_secret); 

    string signature_base_string = GetSignatureBaseString(TimeInSecondsSince1970, Nonce); 
    string SHA1HASH = GetSha1Hash(consumer_secret + "&" + token_secret, signature_base_string); 

    string Header = 
     "OAuth realm=" + '"' + "ADM" + '"' + "," + 
     "oauth_consumer_key=" + '"' + Settings.SettingsManager.consumer_key + '"' + "," + 
     "oauth_token=" + '"' + Settings.SettingsManager.access_token + '"' + "," + 
     "oauth_signature_method=" + '"' + "HMAC-SHA1" + '"' + "," + 
     "oauth_signature= " + '"' + SHA1HASH + '"' + "," + 
     "oauth_timestamp=" + '"' + TimeInSecondsSince1970 + '"' + "," + 
     "oauth_nonce=" + '"' + Nonce + '"' + "," + 
     "oauth_version=" + '"' + "1.0" + '"' + ","; 

    httpWebRequest.Headers.Add(HttpRequestHeader.Authorization, Header); 
    var Result = httpWebRequest.GetResponse(); 

    return Result.ToString(); 
} 

GetSha1Hash

public static string GetSha1Hash(string key, string message) 
{ 
    var encoding = new System.Text.ASCIIEncoding(); 

    byte[] keyBytes = encoding.GetBytes(key); 
    byte[] messageBytes = encoding.GetBytes(message); 

    string Sha1Result = string.Empty; 

    using (HMACSHA1 SHA1 = new HMACSHA1(keyBytes)) 
    { 
     var Hashed = SHA1.ComputeHash(messageBytes); 
     Sha1Result = Convert.ToBase64String(Hashed); 
    } 

    return Sha1Result; 
} 

GetSignatureBaseString

public static string GetSignatureBaseString(string TimeStamp, string Nonce) 
{ 
    //1.Convert the HTTP Method to uppercase and set the output string equal to this value. 
    string Signature_Base_String = "Get"; 
    Signature_Base_String = Signature_Base_String.ToUpper(); 

    //2.Append the ‘&’ character to the output string. 
    Signature_Base_String = Signature_Base_String + "&"; 

    //3.Percent encode the URL and append it to the output string. 
    string PercentEncodedURL = Uri.EscapeDataString(GetAppleApiUrl.GetUrl(AppleApiUrl.SESSION_TOKEN)); 
    Signature_Base_String = Signature_Base_String + PercentEncodedURL; 

    //4.Append the ‘&’ character to the output string. 
    Signature_Base_String = Signature_Base_String + "&"; 

    //5.append parameter string to the output string. 
    Signature_Base_String = Signature_Base_String + Uri.EscapeDataString("oauth_consumer_key=" + Settings.SettingsManager.consumer_key); 
    Signature_Base_String = Signature_Base_String + Uri.EscapeDataString("&oauth_token=" + Settings.SettingsManager.access_token); 
    Signature_Base_String = Signature_Base_String + Uri.EscapeDataString("&oauth_signature_method=" +"HMAC-SHA1"); 
    Signature_Base_String = Signature_Base_String + Uri.EscapeDataString("&oauth_timestamp=" + TimeStamp); 
    Signature_Base_String = Signature_Base_String + Uri.EscapeDataString("&oauth_nonce=" + Nonce); 
    Signature_Base_String = Signature_Base_String + Uri.EscapeDataString("&oauth_version=" + "1.0"); 

    return Signature_Base_String; 
} 

結果（提琴手）
API文檔

Answer 1

看起來你應該參數按字母順序Header串和內GetSignatureBaseString方法排序，如this comment描述和Twitter OAuth documentation