You are here

class OAuthSignatureMethod_PLAINTEXT in OAuth 1.0 6.3

Same name and namespace in other branches
  1. 6 OAuth.php \OAuthSignatureMethod_PLAINTEXT
  2. 7.3 lib/OAuth.php \OAuthSignatureMethod_PLAINTEXT

The PLAINTEXT method does not provide any security protection and SHOULD only be used over a secure channel such as HTTPS. It does not use the Signature Base String.

  • Chapter 9.4 ("PLAINTEXT")

Hierarchy

Expanded class hierarchy of OAuthSignatureMethod_PLAINTEXT

File

lib/OAuth.php, line 152
OAuth 1.0 server and client library.

View source
class OAuthSignatureMethod_PLAINTEXT extends OAuthSignatureMethod {
  public function get_name() {
    return "PLAINTEXT";
  }

  /**
   * oauth_signature is set to the concatenated encoded values of the Consumer Secret and
   * Token Secret, separated by a '&' character (ASCII code 38), even if either secret is
   * empty. The result MUST be encoded again.
   *   - Chapter 9.4.1 ("Generating Signatures")
   *
   * Please note that the second encoding MUST NOT happen in the SignatureMethod, as
   * OAuthRequest handles this!
   */
  public function build_signature($request, $consumer, $token) {
    $key_parts = array(
      $consumer->secret,
      $token ? $token->secret : "",
    );
    $key_parts = OAuthUtil::urlencode_rfc3986($key_parts);
    $key = implode('&', $key_parts);
    $request->base_string = $key;
    return $key;
  }

}

Members

Namesort descending Modifiers Type Description Overrides
OAuthSignatureMethod::check_signature public function Verifies that a given signature is correct 1
OAuthSignatureMethod_PLAINTEXT::build_signature public function oauth_signature is set to the concatenated encoded values of the Consumer Secret and Token Secret, separated by a '&' character (ASCII code 38), even if either secret is empty. The result MUST be encoded again. Overrides OAuthSignatureMethod::build_signature
OAuthSignatureMethod_PLAINTEXT::get_name public function Needs to return the name of the Signature Method (ie HMAC-SHA1) Overrides OAuthSignatureMethod::get_name