Support for TwitterAds OAuth1.0a flow , oauth_callback Authheader param

[hen42]

Hi Alex,
I am looking at your nice library for OAuth1.0 a

When doing an integration againt TwitterAds , we need a oauth_callback param in the Authorization header.
(see description here: https://developer.twitter.com/en/docs/authentication/api-reference/request_token )

Example request:
Request URL: POST https://api.twitter.com/oauth/request_token

Request POST Body: N/A

Authorization Header: OAuth oauth_nonce="K7ny27JTpKVsTgdyLdDfmQQWVLERj2zAK5BslRsqyw", oauth_callback="http%3A%2F%2Fmyapp.com%3A3005%2Ftwitter%2Fprocess_callback", oauth_signature_method="HMAC-SHA1", oauth_timestamp="1300228849", oauth_consumer_key="OqEqJeafRSF11jBMStrZz", oauth_signature="Pc%2BMLdv028fxCErFyi8KXFM%2BddU%3D", oauth_version="1.0"

How can we add the oauth_callback Auth header param using your library ?

Best Regards

[AlexGhiondea]

Hey @hen42

Thanks for the kind words! Let me take a look -- I will get back to you later today!

[AlexGhiondea]

Hey

I looked into this and I think you should be able to do this already. You need to use the OAuthAuthenticator class to create the requests and do the token exchange and then you can create the message handler that will handle the auth.

The link above points to the method that takes a callback and creates the right request.

Let me know if that doesn't work!

[hen42]

Thanks for the answer. I tried using the OAuthAuthenticator to create message, but it did not work.
CreateGetRequestToken address appends the oauth params as query string parameters to the url, however the TwitterAds api doesnt like like. It wants these params in the Authorization Header.

The code I tried was:

        var authenticator = new OAuth.OAuthAuthenticator(apiKey, apiKeySecret);
        var authAddress = authenticator.CreateGetRequestTokenAddress("https://api.twitter.com/oauth/request_token", "POST",CALLBACKURL);

        HttpClient client = new HttpClient(_handler);
        var result  = await  client.PostAsync(authAddress, null);

status was unauthorized.

[AlexGhiondea]

Ah -- I see -- you would like to send the data via auth headers instead of query params?

[AlexGhiondea]

I looked at the code and it looks like what the code does is create a string for the URL. I wonder if the simplest thing to do is create an Uri object from the string returned by authenticator.CreateGetRequestTokenAddress and then strip the parameters from the query parameter when creating the request?

[hen42]

Yes , via AuthHeaders.
I tried to make a request to https://api.twitter.com/oauth/request_token?oauth_callback=xxx (twitter-ads is fine with this query param) via the MessageHandler . It actually sets a oauth_callback value in the Authorization header.
However I get a status 403 back.
I am not sure what goes wrong here, the request goes through if I do in Post man, but not here.

[hen42]

This code actually works:
The httpHandler will append the Outh_call back to the Auth header.

var authAddress = "https://api.twitter.com/oauth/request_token"  + "?oauth_callback=" + HttpUtility.UrlEncode("XXX");
HttpClient client = new HttpClient(_handler);
var result  = await  client.GetAsync(authAddress);

Thanks for the help.

[AlexGhiondea]

@hen42 glad to hear it worked!!!