Значок жетонов в (OAuth) Заголовок запроса авторизации для запроса POST REST API

Question

Привет всем, я пытаюсь понять, как сделать этот токен авторизации OAuth для вызова POST-запроса REST.

документов, состояние:

With a valid access token, your app can make calls to any Yammer API endpoint by sending the access token as a “Bearer” token in the “Authorization” request header. 

GET /api/v1/messages/following.json HTTP/1.1 
Host: www.yammer.com 
Authorization: Bearer abcDefGhiFor 

more details on the “Bearer” token refer to [enter link description here][1] 

If the access token expires or the user de-authorizes your app, the API request will return an HTTP 401 with the following error in the body of the response. 

{ 
    "response": { 
    "message": "Token not found.", 
    "code": 16, 
    "stat": "fail" 
    } 
} 

Ваше приложение может запросить новый маркер доступа, повторно запустив соответствующий поток, если эта ошибка происходит.

В настоящее время мой VB.net код это:

Dim request As HttpWebRequest 
Dim response As HttpWebResponse = Nothing 
Dim reader As StreamReader 
Dim address As Uri 
Dim data As StringBuilder 
Dim byteData() As Byte 
Dim postStream As Stream = Nothing 

address = New Uri("https://www.yammer.com/api/v1/messages.json") 
request = DirectCast(WebRequest.Create(address), HttpWebRequest) 

request.Method = "POST" 
request.Headers("Authorization") = "Bearer " & yammerAPI.userToken 
request.ContentType = "application/json" 
request.Host = "www.yammer.com" 

Dim body As String = "test" 
Dim replied_to_id As Integer = 123456789 
Dim group_id As Integer = 123456789 

data = New StringBuilder() 
'data.Append("&replied_to_id=" & HttpUtility.UrlEncode(replied_to_id)) 
data.Append("group_id=" & HttpUtility.UrlEncode(group_id)) 
data.Append("&body=" & HttpUtility.UrlEncode(body)) 

byteData = UTF8Encoding.UTF8.GetBytes(data.ToString()) 
request.ContentLength = byteData.Length 

Try 
    postStream = request.GetRequestStream() 
    postStream.Write(byteData, 0, byteData.Length) 
Finally 
    If Not postStream Is Nothing Then postStream.Close() 
End Try 

Try 
    response = DirectCast(request.GetResponse(), HttpWebResponse) 
    reader = New StreamReader(response.GetResponseStream()) 
    Debug.Print(reader.ReadToEnd()) 
Finally 
    If Not response Is Nothing Then response.Close() 
End Try 

Я получаю ошибку: Удаленный сервер возвратил ошибку: (401) Несанкционированное.

Я нашел это в следующем Stackoverflow posting:

The Yammer API requires the OAuth data to be in the header. If you look at their example for Getting Data, you'll see the request looks like.

GET /api/v1/messages/favorites_of/1234 HTTP/1.1 HOST: www.yammer.com

Authorization: OAuth oauth_consumer_key="KsTROcNF1Fx3e1PwA",oauth_token="vlVH7A7DOm9wXuHdv58A",oauth_signature_method="PLAINTEXT",oauth_timestamp="1297383841092",oauth_nonce="1047685618",oauth_verifier="E4F8",oauth_signature="yPsEvDnNPIA8xGCFLvMJ73K0DD9ivMpATJeFOSo%26fSFh9UPkHQ6oRwK5OTne33ltnSnbQ9XrAhA72heg"

The OAuth data is in the Authorization header and not in the URL. The only time you have any OAuth data in the URL is when you do the authorize.

Любая помощь будет большим, чтобы понять это больше!

Answer 1

Мой недавний опыт с Oauth предлагает тип контента должен быть:

Request.ContentType = "application/x-www-form-urlencoded" Request.Method = "POST" Request.ContentLength = byteArray.Length

вместо request.ContentType = "приложения/JSON"