Hi,

By referring here
http://wiki.developer.myspace.com/index.php?title=OAuth_REST_API_Usage_-_Authentication_Process

i had successfully pass through the authentication until Step 3 but failed on step 4 when trying to get the access token

It gives error saying "signature_invalid"

I had tried also using the Myspace Oauth testing tools to try the submission and get the same signature_invalid error.

Did i miss out something?

Below is the parameter and result from Myspace oauth testing tools

Server : http://api.myspace.com
Resource URL : access_token
Request Method : GET
Consumer Key : http://www.myspace.com/557696287
Consumer Secret : 988d121aad514c5a86dc2c62cf6c30ff358e61599ae940ed9ae2db5c7add6db1

Oauth Token : TVpXLObSZtp8sjlf0DNBiTQXCVMI8UyljTMhuseIarLbqr5DiJunbQ4FvZ%2FthzussC%2FO7uTzLUmDRg8rYzTcOSXyclETgq8oyxBrXklkcVWilM5zq3Hurss9Xep95tl8
- I get the oauth token from the call back url parameter as below
 http://example.com/oauth_upd.php?oauth_token=TVpXLObSZtp8sjlf0DNBiTQXCVMI8UyljTMhuseIarLbqr5DiJunbQ4FvZ%252FthzussC%252FO7uTzLUmDRg8rYzTcOSXyclETgq8oyxBrXklkcVWilM5zq3Hurss9Xep95tl8&oauth_verifier=015ad8ed-7dbc-4293-96a8-22af913a9156

Oauth Timestamp : 1292465553
Oauth Nonce : 3555642921
Signature Method : HMAC-SHA1
Version : 1.0

-------------------------------
Request Format :
http://api.myspace.com/access_token?oauth_consumer_key=http%3A%2F%2Fwww.myspace.com%2F557696287&oauth_nonce=3555642921&oauth_signature=LjOEnibavxxbqWfPDqaZTefSUh0%3D&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1292465553&oauth_token=TVpXLObSZtp8sjlf0DNBiTQXCVMI8UyljTMhuseIarLbqr5DiJunbQ4FvZ%252FthzussC%252FO7uTzLUmDRg8rYzTcOSXyclETgq8oyxBrXklkcVWilM5zq3Hurss9Xep95tl8&oauth_version=1.0

Response :
oauth_problem=signature_invalid

------------------------------
Request Headers
Authorization =OAuth realm=http%3a%2f%2fwww.OAuth.net,oauth_consumer_key=http%3a%2f%2fwww.myspace.com%2f557696287,oauth_token=TVpXLObSZtp8sjlf0DNBiTQXCVMI8UyljTMhuseIarLbqr5DiJunbQ4FvZ%252FthzussC%252FO7uTzLUmDRg8rYzTcOSXyclETgq8oyxBrXklkcVWilM5zq3Hurss9Xep95tl8,oauth_signature_method=HMAC-SHA1,oauth_signature=LjOEnibavxxbqWfPDqaZTefSUh0%3d,oauth_timestamp=1292465553,oauth_nonce=3555642921,oauth_version=1.0
x-MySpace-date =Thu, 16 Dec 2010 02:18:16 GMT
x-MySpace-usertoken =TVpXLObSZtp8sjlf0DNBiTQXCVMI8UyljTMhuseIarLbqr5DiJunbQ4FvZ%2FthzussC%2FO7uTzLUmDRg8rYzTcOSXyclETgq8oyxBrXklkcVWilM5zq3Hurss9Xep95tl8
Host =api.myspace.com
Cookie =USER=cri3cLo0HMsdeWnsCR5%2bHkqu3n1EDrcQnKESk7AgdmvEImOdGEUybpS4HpBmpYj%2fPngCYVgayV2qbe5GshU0t23aRsJzOhtaRx7BunR%2fMPU4HZfYwo%2fsL1Bq%2fOHGpSDTCQxJu0YOh8hp2OTAKYERH5lVVzMSys4iSh2vh3gBqpmf9CQYtRPsdJd0cYeYoG5kei1TCc%2bGy0Ua0CO%2fjjvHt%2fstpz%2bVnhjX4DygO3fcylVQD%2bXhW%2f2fphwBWfbu0Px3xuVyywCmOSNgS69fdzeGGC6j01LPju8FFBXLKdO5RtJLER%2be9gCfVjXnpoesthayRFwRHnP5Ik4cdIypBVbgmYdwgyALpWsPEzcaN8wDNRTYEQocv6j%2f7bPWFhMXtwYC%7cMeoxa9RFwJKv3cQcoZon%2fBKEJiBgdEbqM14B%2fM0Juy%2fHAF8aferbRrr6X32dZ6oV2wkpDUt2eSUOfkqaXMBOuoEg6I17L80JjVmxMNqIIkE%3d
Connection =Keep-Alive

Response Status
StatusCode=401 - Unauthorized
StatusDescription=Unauthorized

Response Headers
Content-Length =31
Cache-Control =private
Content-Type =application/x-www-form-urlencoded; charset=utf-8
Set-Cookie =MSCulture=IP=10.44.26.208&IPCulture=en-US&PreferredCulture=en-US&PreferredCulturePending=&Country=cmVzZXJ2ZWQ=&ForcedExpiration=634280338957189837&timeZone=0&myStuffDma=&myStuffMarket=&USRLOC=QXJlYUNvZGU9MCZDaXR5PSZDb3VudHJ5Q29kZT0mQ291bnRyeU5hbWU9JkRtYUNvZGU9MCZMYXRpdHVkZT0wJkxvbmdpdHVkZT0wJlBvc3RhbENvZGU9JlJlZ2lvbk5hbWU9JkxvY2F0aW9uSWQ9MA==&UserFirstVisit=1; domain=.myspace.com; expires=Sat, 15-Jan-2011 02:18:15 GMT; path=/,ASP.NET_SessionId=nos0bxz1bx0mcxa3ipup4q45; path=/; HttpOnly
Server =Microsoft-IIS/6.0
WWW-Authenticate =OAuth realm="http://api.myspace.com/authorization", oauth_problem=signature_invalid
X-Powered-By =ASP.NET
X-Server =257f9dd17983f931989e10c90f40c4f2a242cbdcb6cac362
Date =Thu, 16 Dec 2010 02:18:15 GMT

------------------------------

Thanks in advance for everyone that helps.

Best Regards,
Chong

Hi,

By referring to a forum threat (http://developer.myspace.com/Community/forums/p/4440/27975.aspx#27975)
I am able to get the correct signature (i think it is correct)
however, i am getting another error as below

401 This endpoint is for External MySpaceID applications only (offsite apps)

I had tried to search through the forum but doesn't seem to find a good solution.

Hope someone able to help on this.

Thanks.

Best Regards,
Chong

 You have an onsite app. This is why it does not work. You can use this endpoint if you had a MyspaceID (offsite) app. Onsite apps don't require oauth tokens for api calls in general, and there are certain calls that are specific only to offsite apps, which do require tokens and standard oauth flow.

thanks,

Joel