Making GET API call using Access Token and Access Secret

oauth
api

#1

I am testing this in Postman. Calling GET https://api.twitter.com/1.1/statuses/user_timeline.json?user_id=xxxxxxx

I am using Firebase auth to OAuth login using twitter. This allows me obtain user access token and access secret.

I wanted to make an API call in the client to retrieve current users statuses on user timeline. however by just access token and access secret I get an 400 error status with code 215(bad auth data). If I include app consumer key and consumer secret the API GET request works. But this limits me to make the call on my server because the consumer secret is exposed . Is this the only way? or am I missing something?


#2

You need to use all four values to make an authenticated call, correct.