We really recommend performing OAuth using HTTP headers instead of query string parameters.
The OAuth 1.0A signature format is complex to generate. I would recommend using a library.
The process for generating the signature and parameters involved in OAuth are the same regardless though… instead of presenting the oauth_* parameters in a HTTP header, you attached them as query string parameters instead.