Kong / Kong/insomnia

[Bug] Oauth 1 signature calculations does not include body

Open
#1,137 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

A-oauth B-bug E-good-first-issue
Dominant language
TypeScript
Stars
40k
Forks
2.4k
Avg merge
2d 13h
Merged PRs (30d)
61

Description

- Insomnia Version: 6.0.2
- Operating System: Win 7 SP2

## Details

According to the specification, body parameters are included in signature calculations. This is done by putting them in the requestData.data object for oauth-1.0a. However, this isn't done in the linking code. I guess this is because there's no nice way to deal with body content as parameters.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the linking code that builds requestData for oauth-1.0a, then trace how request body parameters are represented. Compare the signature input with the OAuth 1.0 specification and verify that body parameters are included in calculations; the issue names no specific files or tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
api
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.