Status: 401 Unauthorized

ruchinksinha · 2012-07-02T20:50:53.000Z

I am integrating Twitter in one of the Oracle’s Product Siebel. I am using OAuth Authentication. I have successfully integrated the friends, followers and the direct message in Siebel. Now I am trying to post Tweets from my application but I am constantly getting 401 Unauthorized. I have done the following things to rectify the problem but no success:

I have deleted and recreated the application with read-write-directmessage access
I have verified all the steps of OAutho Authentication
My clock is in sync with the Twitter Clock
I am using POST method for posting the tweets and was using the GET method for Friends, Followers and Direct Messages
Below is my HTTP Request Header and the Response Header. Please help me out with my issue.

Thanks,
@ruchinksinha

HTTP Transport Parameters:

Request URL = http://api.twitter.com/1/statuses/update.xml
Request Method = POST
Sending Request
** HTTP request Headers for Data Send Request:
User-Agent: Mozilla/4.0
Accept: text/*
Content-Type: text/xml; charset=UTF-8
Authorization: OAuth oauth_consumer_key=“BEYuQ4YmXpy5nwwVIxYwOg”,oauth_nonce=“qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq”,oauth_signature_method=“HMAC-SHA1”,oauth_signature=“TS3otUVrbDleFSVnO2pWdJhoLaw”,oauth_timestamp=“1341261370”,oauth_token=“361729128-RAeksAvpDa6ipd7WCRxSS5rKFnYzHHoeW2Ni2zqP”,oauth_version=“1.0”

*** HTTP response Headers from Data Send request:
HTTP/1.1 401 Unauthorized
Date: Mon, 02 Jul 2012 20:39:13 GMT
Status: 401 Unauthorized
WWW-Authenticate: OAuth realm="http://api.twitter.com"
X-Runtime: 0.00822
Cache-Control: no-cache, max-age=1800
Content-Type: application/xml; charset=utf-8
Content-Length: 150
Set-Cookie: k=10.36.32.105.1341261553374025; path=/; expires=Mon, 09-Jul-12 20:39:13 GMT; domain=.twitter.com
Set-Cookie: guest_id=v1%3A134126155337777055; domain=.twitter.com; path=/; expires=Thu, 03-Jul-2014 08:39:13 GMT
Set-Cookie: _twitter_sess=BAh7CDoPY3JlYXRlZF9hdGwrCOgea0k4AToHaWQiJTg5YWQ2M2I5ZWY4NTE2%250AZjNlNTc2ZDI2NTg5ZjUzZjJhIgpmbGFzaElDOidBY3Rpb25Db250cm9sbGVy%250AOjpGbGFzaDo6Rmxhc2hIYXNoewAGOgpAdXNlZHsA–0ff5a751cc4881995b178f46aed03e7ab1b14eeb; domain=.twitter.com; path=/; HttpOnly
Expires: Mon, 02 Jul 2012 21:09:13 GMT
Vary: Accept-Encoding
Server: tfe

episod · 2012-07-02T21:12:05.000Z

Hi @ruchinksinha,

At a cursory glance everything here looks close to correct but a few questions:

I don’t see a POST body included in this snippet – are you setting one, and if so, what are the values?

It’d be very useful to see a OAuth signature base string to compare the encoding of the status parameter that I assume you’re sending with the POST body – are you able to access that for comparison?

Have you tried a call to statuses/update using the same tokens but a different library or tool such as the OAuth tool on this site?

Thanks!

ruchinksinha · 2012-07-02T21:18:00.000Z

Hi Taylor,

Thanks for a quick response.
Yes I am setting the POST body in the HTTP Request Body and it is given below:
stauts=TestTweetFromSiebel.

I have able to post Tweets using the Tools provided on Twitter like the one provided by apigee. Below is the request that I see from the apigee tool.

POST /1/statuses/update.xml?status=SiebelTweet1 HTTP/1.1
Authorization:
OAuth oauth_consumer_key=“1U0pI4MFrf5mWe4GWDVwdA”,oauth_signature_method=“HMAC-SHA1”,oauth_timestamp=“1341260900”,oauth_nonce=“394354140”,oauth_version=“1.0”,oauth_token=“361729128-3S1FpI8U7BsUlHw8mR7rNHepyGRh3YHU2bRKeRhc”,oauth_signature="PzJbLkJqOSa%2FMmTeLyvfk0xRF5M%3D"
Host:
api.twitter.com
Content-Length:
0
X-Forwarded-For:
10.203.10.109
X-Target-URI:
http://api.twitter.com
Connection:
Keep-Alive

I have compared the same to my HTTP Request and I don’t see any issue. It will be really great if you can help me out with the debugging of this.

OAuth Signature BaseString is given below:

POST&https://api.twitter.com/1/statuses/update.xml&oauth_consumer_key=BEYuQ4YmXpy5nwwVIxYwOg&oauth_nounce=8888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1341264227&oauth_token=361729128-RAeksAvpDa6ipd7WCRxSS5rKFnYzHHoeW2Ni2zqP&oauth_version=1.0&status=FromSiebel1

Thanks,
Ruchin

episod · 2012-07-03T14:33:59.000Z

Your signature basestring doesn’t look to be percent-encoded – I would expect to see something closer to this:


POST&https%3A%2F%2Fapi.twitter.com%2F1%2Fstatuses%2Fupdate.xml&oauth_consumer_key%3DBEYuQ4YmXpy5nwwVIxYwOg%26oauth_nounce%3D8888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1341264227%26oauth_token%3D361729128-RAeksAvpDa6ipd7WCRxSS5rKFnYzHHoeW2Ni2zqP%26oauth_version%3D1.0%26status%3DFromSiebel1

ruchinksinha · 2012-07-05T10:41:00.000Z

Hi Taylor,

I have built the Header Authorization as given below:


var sTimestamp = timecode();
var sNonce = SiebelNonce(sTimestamp);
var sSignMethod = "HMAC-SHA1";
var sAuthVersion = "1.0";
var sBaseParamString = “oauth_consumer_key=” + sConsumerKey + “&oauth_nonce=” + sNonce + “&oauth_signature_method=” + sSignMethod + “&oauth_timestamp=” + sTimestamp + “&oauth_token=” + oauth_token + “&oauth_version=” + sAuthVersion + “&status=TestSiebel”;
var sEncodedParamString = PercentEncodeString(sBaseParamString);
var sEncodedTargetString = PercentEncodeString(“https://api.twitter.com/1/statuses/update.xml”);
var oauth_signature = b64_hmac_sha1(PercentEncodeString(sConsumerSecret + “&” + oauth_token_secret), PercentEncodeString(“POST&” + sEncodedTargetString + “&” + sEncodedParamString));
var sAuthorizationHeader = “OAuth oauth_consumer_key=”"+sConsumerKey+"",oauth_signature_method=""+sSignMethod+"",oauth_timestamp=""+sTimestamp+"",oauth_nonce=""+sNonce+"",oauth_version=""+sAuthVersion+"",oauth_token=""+oauth_token+"",oauth_signature=""+sEncSignature+""";

where the sConsumerKey, sConsumerSecret, oauth_token_secret, oauth_token and oauth_signature are Percent Encoded.

The Encoded base string for signature is given below:


POST&https%3A%2F%2Fapi.twitter.com%2F1%2Fstatuses%2Fupdate.xml&oauth_consumer_key%3DBEYuQ4YmXpy5nwwVIxYwOg%26oauth_nonce%3Dh3CpX9raxdbFpmRV0FpLAraGHNQWb59OGrxPDNWeskQqdzGyBIw1aI6eb3xIx11Ie35I07RTCCIvJooQQucHQQxDZZgkNsvOMD0x%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1341426345%26oauth_token%3D361729128-RAeksAvpDa6ipd7WCRxSS5rKFnYzHHoeW2Ni2zqP%26oauth_version%3D1.0%26status%3DTestSiebel

I am using the below function for PercentEncodeString.


function PercentEncodeString(InputString)
{
	var sEncString = InputString;
	sEncString = sEncString.replace(/\#/g, "%23");
	sEncString = sEncString.replace(/\$/g, "%24");
	sEncString = sEncString.replace(/\%/g, "%25");
	sEncString = sEncString.replace(/\&/g, "%26");
	sEncString = sEncString.replace(/\@/g, "%40");
	sEncString = sEncString.replace(/\//g, "%2F");
	sEncString = sEncString.replace(/\^/g, "%5E");
	sEncString = sEncString.replace(/\~/g, "%7E");
	sEncString = sEncString.replace(/\{/g, "%7B");
	sEncString = sEncString.replace(/\}/g, "%7D");
	sEncString = sEncString.replace(/\[/g, "%5B");
	sEncString = sEncString.replace(/\]/g, "%5D");
	sEncString = sEncString.replace(/\=/g, "%3D");
	sEncString = sEncString.replace(/\:/g, "%3A");
	sEncString = sEncString.replace(/\,/g, "%2C");
	sEncString = sEncString.replace(/\;/g, "%3B");
	sEncString = sEncString.replace(/\?/g, "%3F");
	sEncString = sEncString.replace(/\+/g, "%2B");
	sEncString = sEncString.replace(/\\/g, "%5C");
	sEncString = sEncString.replace(/\"/g, "%22");
	sEncString = sEncString.replace(/\!/g, "%21");
	sEncString = sEncString.replace(/\*/g, "%2A");
	sEncString = sEncString.replace(/\'/g, "%27");
	sEncString = sEncString.replace(/\(/g, "%28");
	sEncString = sEncString.replace(/\)/g, "%29");
	sEncString = sEncString.replace(/\ /g, "%20");
	return sEncString;
}

Final HTTP Call is as shown below:

HTTPRequestMethod = "POST"
HTTPRequestURLTemplate = "https://api.twitter.com/1/statuses/update.xml"
HDR.Authorization = sAuthorizationHeader
HTTPContentType = "application/x-www-form-urlencoded"
HTTPRequestBodyTemplate = “status=TestSiebel”

Below is the HTTP Request captured from the log files.

*** HTTP Transport Parameters:

Request URL = https://api.twitter.com/1/statuses/update.xml
Request Method = POST
Sending Request

*** HTTP request Headers for Data Send Request:
User-Agent: Mozilla/4.0
Accept: text/*
Content-Type: application/x-www-form-urlencoded
Authorization: OAuth oauth_consumer_key=“BEYuQ4YmXpy5nwwVIxYwOg”,oauth_signature_method=“HMAC-SHA1”,oauth_timestamp=“1341410152”,oauth_nonce=“gmqK5x4HqTtciNOwqzmrvfPVZXCfcbuPLrIUQV9MWbAJegRNsmPuDuRgLmi9Fx2k1AB7uAJFSb2BpmiLMAisyXo2T963DJXqJD9p”,oauth_version=“1.0”,oauth_token=“361729128-RAeksAvpDa6ipd7WCRxSS5rKFnYzHHoeW2Ni2zqP”,oauth_signature=“RPcV2M3Eu72M3yzyeaa7NCynBj4”

*** HTTP response Headers from Data Send request:
HTTP/1.1 401 Unauthorized
Date: Wed, 04 Jul 2012 13:58:53 GMT
Status: 401 Unauthorized
WWW-Authenticate: OAuth realm="https://api.twitter.com"
X-Runtime: 0.01033
Cache-Control: no-cache, max-age=1800
Content-Type: application/xml; charset=utf-8
Content-Length: 150
Set-Cookie: k=10.36.31.109.1341410333943644; path=/; expires=Wed, 11-Jul-12 13:58:53 GMT; domain=.twitter.com
Set-Cookie: guest_id=v1%3A134141033394892564; domain=.twitter.com; path=/; expires=Sat, 05-Jul-2014 01:58:53 GMT
Set-Cookie: _twitter_sess=BAh7CDoPY3JlYXRlZF9hdGwrCAVVSVI4ASIKZmxhc2hJQzonQWN0aW9uQ29u%250AdHJvbGxlcjo6Rmxhc2g6OkZsYXNoSGFzaHsABjoKQHVzZWR7ADoHaWQiJTQx%250AOTg3ZWViNGVlMTY4ZGQ5OWExZDljMWE5YjRkYjcy–dbac981bce37c6a234f46610c4ea3e650371132b; domain=.twitter.com; path=/; HttpOnly
Expires: Wed, 04 Jul 2012 14:28:53 GMT
Vary: Accept-Encoding
Server: tfe

Please help me understand the mistake that I am doing.

Thanks,
Ruchin

morunas · 2013-07-12T08:45:00.000Z

I know it’s an old post but same topic and since it appears unresolved I am having the same issue.

I am using tmhOAuth.

For signing in works perfect but when sending POST message to status update I get 401. Here is the call code and request array:

$postcode = $tmhOAuth->user_request(array(
‘method’ => ‘POST’,
‘url’ => $tmhOAuth->url(“1.1/statuses/update”),
‘params’ => array(
‘status’ => $twmessage
)
));

user_request is a method of tmhOAuth from tmhOAuth library here https://github.com/themattharris/tmhOAuth

[status] => har%20doneret%20et%20bidrag%20til%20Jacob%20Bundsgaard%20p%C3%A5%20http%3A%2F%2Fwww.gippler.com%2FJACOBBUNDSGAARD )

[basestring_params] => oauth_consumer_key=XXXXXXXXXXXXXXXXXXXXXXX&oauth_nonce=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX&oauth_signature_method=HMAC-SHA1&oauth_timestamp=XXXXXXXXXX&oauth_token=XXXXXXXXXXXXXXXXXXXXXXX&oauth_version=1.0&status=har%20doneret%20et%20bidrag%20til%20Jacob%20Bundsgaard%20p%C3%A5%20http%3A%2F%2Fwww.gippler.com%2FJACOBBUNDSGAARD

[postfields] => status=har%20doneret%20et%20bidrag%20til%20Jacob%20Bundsgaard%20p%C3%A5%20http%3A%2F%2Fwww.gippler.com%2FJACOBBUNDSGAARD

[basestring] => POST&https%3A%2F%2Fapi.twitter.com%2F1.1%2Fstatuses%2Fupdate.json&oauth_consumer_key%3DXXXXXXXXXXXXXXXXXXXXXXX%26oauth_nonce%3DXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3DXXXXXXXXXX%26oauth_token%3DXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%26oauth_version%3D1.0%26status%3Dhar%2520doneret%2520et%2520bidrag%2520til%2520Jacob%2520Bundsgaard%2520p%25C3%25A5%2520http%253A%252F%252Fwww.gippler.com%252FJACOBBUNDSGAARD

[signing_key] => XXXXX…XXXXX

JerinKurian · 2013-10-03T18:12:23.000Z

Hi
I am getting 401 Unauthorized while trying to post to twitter using windows 8 metro app.

OAuth oauth_consumer_key=“XTeBYxPpNHrwhckAgdSF1w”, oauth_nonce=“1139319711”, oauth_signature=“hxePYea2%2BIUa85U1p%2Fry20zpHi0%3D”, oauth_signature_method=“HMAC-SHA1”, oauth_timestamp=“1380823904”, oauth_token=“144096934-h4tCSOoTzAT9wR4Y0WiCE4UcjdEEta8IO5xgyg”, oauth_version=“1.0”

RonaldoMessi004 · 2014-07-11T07:01:00.000Z

@episod Hi,
I have been facing the same issue as @ruchinksinha , and have followed the suggestions as mentioned above. But the error still persists. Is there any syntax that is incorrect/missing ?
Or is there an integration issue with Siebel?
Please help.