From 24d4f4b908e360c4366b2e5be19519abcd1c05a1 Mon Sep 17 00:00:00 2001 From: Paul Klimov Date: Mon, 23 Dec 2013 13:04:22 +0200 Subject: [PATCH] Signature base string generation for the OAuth1 fixed. --- extensions/yii/authclient/OAuth1.php | 1 + 1 file changed, 1 insertion(+) diff --git a/extensions/yii/authclient/OAuth1.php b/extensions/yii/authclient/OAuth1.php index 11c99e8..e68118d 100644 --- a/extensions/yii/authclient/OAuth1.php +++ b/extensions/yii/authclient/OAuth1.php @@ -298,6 +298,7 @@ class OAuth1 extends BaseOAuth protected function composeSignatureBaseString($method, $url, array $params) { unset($params['oauth_signature']); + uksort($params, 'strcmp'); // Parameters are sorted by name, using lexicographical byte value ordering. Ref: Spec: 9.1.1 $parts = [ strtoupper($method), $url,