I'm trying to build a REST request for friends using some of the optional parameters for filtering the results. For some reason it seems that the list=xxx needs to be placed at the beginning of the query string and the rest placed at the end. Is there some logic to this? Here's an example generated using the OAuth tool:
Trying to put list=xxx at the end of the query string (or the rest in the beginning) causes an "invalid digital signtature" error. This seems kind of arbitrary and makes dynamically formating the request more complex. Guess maybe everything but list=xxx is post processing, it's just making the process I have in place break.