Endpoint for OAuth v1.0 API 

Mobage Simplified Chinese Platform

Mobage Traditional Chinese Platform

Temporaray Credential

Description

This method requests a temporary credential to get the temporary credential token. 

URI Fragment

/request_temporary_credential

HTTP Method

POST

Request Headers

Any request to the Mobage REST APIs must include the Authorization header. For more details, see How to add the Authorization Header for Temporary Credentail . 

Response Status Code

Response Body

• oauth_token
• oauth_token_secret
• oauth_callback_confirmed

Here's an example of the response body:

Resource Owner Authorization The client application must call the Social.Common.Auth.authorizeToken() method to implement 3-legged OAuth authentication. Pass the token of the temporary credential as an argument. The application then sends the oauth_verifier in the return value to the game server. See RESTful API Overview for more information.

Example

Token Credential

Description

This method acquires the token credential.

URI Fragment

/request_token

HTTP Method

POST

Request Headers

Any request to the Mobage REST APIs must include the Authorization header. For more details, see How to add the Authorization Header for Token Credentail . 

Response Status Code

Response Body

• oauth_token
• oauth_token_secret
• oauth2_token

Example

How to Add the Authorization Header for Temporary Credential

Follow the 3 steps below to add an "Authorization" Header for temporary credential:

Step 1. Create the base string

1. build a string for the OAuth parameters:  firstly sort the following parameters alphabetically, URL encode the names and values, then join name and value with "=", finally join name/value pairs with "&" 

2. encode the following three parameters.

3. join the encoded parameters with "&".

Step 2. Generate the oauth_signature

1. build a secret by joining the Consumer Secret and  the empty string with "&"

2. Pass the base string and secret to the HMAC-SHA1 hashing algorithm.

3. the output of HMAC-SHA1 hashing algorithm is a binary string. Use base64 encode to produce the signature string.

A tool is provided to verify whether your signature is correct. Refer to Oauth Signature Tool. 

Step 3. Build the Authorization Header

1. Name and value in the table below are URL-encoded

2. Double quote the value, join name and value with "=", join name/value pairs with ","

3. Add realm parameter as an option

4. Add "OAuth " (including the space at the end) to the beginning of the header.

Authorization Header example

The parameters for base string are as follows:

The created base string:

POST&

http%3A%2F%2Fsp.sb.mobageplatform.cn%2Fsocial%2Fapi%2Foauth%2Fv2.01%2Frequest_temporary_credential&

oauth_callback%3Doob%26

oauth_consumer_key%3D9a9884572c246994632d%26

oauth_nonce%3DU0KYtsU5Y7UyFVw1%26

oauth_signature_method%3DHMAC-SHA1%26

oauth_timestamp%3D1361269015%26

oauth_version%3D1.0

cqSNkXvPTgkyiJWaMl49kifUnL8=

OAuth oauth_callback="oob",oauth_consumer_key="9a9884572c246994632d",oauth_nonce="U0KYtsU5Y7UyFVw1",oauth_signature="cqSNkXvPTgkyiJWaMl49kifUnL8%3D",oauth_signature_method="HMAC-SHA1",oauth_timestamp="1361269015",oauth_version="1.0",realm=""

How to Add the Authorization Header for Token Credential

Follow the 3 steps below to add an "Authorization" Header for token credential:

Step 1. Create the base string

1. build a string for the OAuth parameters:  firstly sort the following parameters alphabetically, URL encode the names and values, then join name and value with "=", finally join name/value pairs with "&" 

2. encode the following three parameters.

3. join the encoded parameters with "&".

Step 2. Generate the oauth_signature

1. build a secret by joining the Consumer Secret and  the Token Secret (obtained from the temporary credential) with "&".

2. Pass the base string and secret to the HMAC-SHA1 hashing algorithm.

3. the output of HMAC-SHA1 hashing algorithm is a binary string. Use base64 encode to produce the signature string.

A tool is provided to verify whether your signature is correct. Refer to Oauth Signature Tool. 

Step 3. Build the Authorization Header

1. Name and value in the table below are URL-encoded

2. Double quote the value, join name and value with "=", join name/value pairs with ","

3. Add realm parameter as an option

4. Add "OAuth " (including the space at the end) to the beginning of the header.

Authorization Header example

Parameters

The created base string:

Note that the characters in red is %253A instead of %25 due to URL encoded twice.

The generated signature:

The built authorization header: