I am using the same method of OAuth than the public rest api, with app-key,app-secret,consumer key and consumer secret.
This is an example of header that i am generating: OAuth oauth_consumer_key=, oauth_nonce=“332A085E”,oauth_signature=“7wF6wBmolI4TTOKD0vtye%2FFwOkU%3D”, oauth_signature_method=“HMAC-SHA1”, oauth_timestamp=“1500470358”, oauth_token=,oauth_version=“1.0”