class OAuthSignatureMethod_PLAINTEXT in OAuth 1.0 7.3

The PLAINTEXT method does not provide any security protection and SHOULD only be used over a secure channel such as HTTPS. It does not use the Signature Base String.

• Chapter 9.4 ("PLAINTEXT")

Hierarchy

• class \OAuthSignatureMethod
  • class \OAuthSignatureMethod_PLAINTEXT

File

lib/OAuth.php, line 154

OAuth 1.0 server and client library.

class OAuthSignatureMethod_PLAINTEXT extends OAuthSignatureMethod {
  public function get_name() {
    return "PLAINTEXT";
  }

  /**
   * oauth_signature is set to the concatenated encoded values of the Consumer Secret and
   * Token Secret, separated by a '&' character (ASCII code 38), even if either secret is
   * empty. The result MUST be encoded again.
   *   - Chapter 9.4.1 ("Generating Signatures")
   *
   * Please note that the second encoding MUST NOT happen in the SignatureMethod, as
   * OAuthRequest handles this!
   */
  public function build_signature($request, $consumer, $token) {
    $key_parts = array(
      $consumer->secret,
      $token ? $token->secret : "",
    );
    $key_parts = OAuthUtil::urlencode_rfc3986($key_parts);
    $key = implode('&', $key_parts);
    $request->base_string = $key;
    return $key;
  }

}

Members

Name	Modifiers	Type	Description	Overrides
OAuthSignatureMethod::check_signature	public	function	Verifies that a given signature is correct	1
OAuthSignatureMethod_PLAINTEXT::build_signature	public	function	oauth_signature is set to the concatenated encoded values of the Consumer Secret and Token Secret, separated by a '&' character (ASCII code 38), even if either secret is empty. The result MUST be encoded again. Overrides OAuthSignatureMethod::build_signature
OAuthSignatureMethod_PLAINTEXT::get_name	public	function	Needs to return the name of the Signature Method (ie HMAC-SHA1) Overrides OAuthSignatureMethod::get_name