php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #62429 checkOAuthRequest does not pass exceptions from oauth_generate_sig_base
Submitted: 2012-06-27 06:42 UTC Modified: -
Votes:3
Avg. Score:4.3 ± 0.9
Reproduced:2 of 2 (100.0%)
Same Version:2 (100.0%)
Same OS:2 (100.0%)
From: dlundgren at syberisle dot net Assigned:
Status: Open Package: oauth (PECL)
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
 [2012-06-27 06:42 UTC] dlundgren at syberisle dot net
Description:
------------
checkOAuthRequest does not pass exceptions when oauth_generate_sig_base raises an exception

Test script:
---------------
$oauthProvider = new OauthProvider();
$oauthProvider->consumerHandler('lookupConsumer');
$oauthProvider->timestampNonceHandler('lookupTimestampNonce');
$oauthProvider->checkOAuthRequest("/api/users", "GET");

Expected result:
----------------
An Exception with "Invalid url when trying to build base signature string" message

Actual result:
--------------
An Exception with "Signatures do not match" message

Patches

provider-c.patch (last revision 2012-06-27 06:43 UTC by dlundgren at syberisle dot net)

Pull Requests

 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Tue Dec 03 17:01:29 2024 UTC