php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #62429 checkOAuthRequest does not pass exceptions from oauth_generate_sig_base
Submitted: 2012-06-27 06:42 UTC Modified: -
Votes:3
Avg. Score:4.3 ± 0.9
Reproduced:2 of 2 (100.0%)
Same Version:2 (100.0%)
Same OS:2 (100.0%)
From: dlundgren at syberisle dot net Assigned:
Status: Open Package: oauth (PECL)
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If this is not your bug, you can add a comment by following this link.
If this is your bug, but you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: dlundgren at syberisle dot net
New email:
PHP Version: OS:

 

 [2012-06-27 06:42 UTC] dlundgren at syberisle dot net
Description:
------------
checkOAuthRequest does not pass exceptions when oauth_generate_sig_base raises an exception

Test script:
---------------
$oauthProvider = new OauthProvider();
$oauthProvider->consumerHandler('lookupConsumer');
$oauthProvider->timestampNonceHandler('lookupTimestampNonce');
$oauthProvider->checkOAuthRequest("/api/users", "GET");

Expected result:
----------------
An Exception with "Invalid url when trying to build base signature string" message

Actual result:
--------------
An Exception with "Signatures do not match" message

Patches

provider-c.patch (last revision 2012-06-27 06:43 UTC by dlundgren at syberisle dot net)

Add a Patch

Pull Requests

Add a Pull Request

 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu Apr 25 17:01:29 2024 UTC