I am using OAuth and POST. I thought that with POST the parameters should go in the body and not in the url, and visa versa with GET.
Using the following scenario I get a valid stream back from twitter (but, I am suspicious because I am putting the track parameters in BOTH the body and the url, even though my understanding is the parameters belong only in the body for a POST).
URL: https://stream.twitter.com/1.1/statuses/filter.json&track=zzz
BODY: track=zzz
OAUTH HEADER: OAuth oauth_consumer_key=“uOIeuhbP7I3bezsxJwIfNg”,oauth_nonce=“NjM0ODM2NTQwMjk1MzEyNTAw”,oauth_signature=“BTNeOmknDMTco8FHitWu0cTaHKk%3D”,oauth_signature_method=“HMAC-SHA1”,oauth_timestamp=“1348071630”,oauth_token=“295797426-7ePFwQbWQ0wLQght65DJqkXlivkVKYMCMQPtFd3v”,oauth_version=“1.0”
So, the above works, though I don’t think it should because I have track=zzz embedded in the url. Now, the scenario below does not work (401), though I expected to work. The only difference is I don’t embed track=zzz in the url.
URL: https://stream.twitter.com/1.1/statuses/filter.json
BODY: track=zzz
OAUTH HEADER: OAuth oauth_consumer_key=“uOIeuhbP7I3bezsxJwIfNg”,oauth_nonce=“NjM0ODM2NTQzNjc0ODQzNzUw”,oauth_signature=“BgNG85eMtOaXcrPDLqy%2BqEp5k7I%3D”,oauth_signature_method=“HMAC-SHA1”,oauth_timestamp=“1348071967”,oauth_token=“295797426-7ePFwQbWQ0wLQght65DJqkXlivkVKYMCMQPtFd3v”,oauth_version=“1.0”