zorba-coders team mailing list archive

[Matthias Brantner <matthias.brantner@xxxxxxxxxx>]

Matthias Brantner has proposed merging lp:~zorba-coders/zorba/fix-oauth-security into lp:zorba/oauth-module.

Requested reviews:
  Chris Hillery (ceejatec)

For more details, see:
https://code.launchpad.net/~zorba-coders/zorba/fix-oauth-security/+merge/117813

adapted to new hmac v.2 module
-- 
https://code.launchpad.net/~zorba-coders/zorba/fix-oauth-security/+merge/117813
Your team Zorba Coders is subscribed to branch lp:zorba/oauth-module.

=== modified file 'src/com/zorba-xquery/www/modules/oauth/client.xq'
--- src/com/zorba-xquery/www/modules/oauth/client.xq	2012-04-25 16:32:43 +0000
+++ src/com/zorba-xquery/www/modules/oauth/client.xq	2012-08-01 22:33:17 +0000
@@ -504,7 +504,7 @@
    : uses the hmac-sha1 algorithm found here @see http://tools.ietf.org/html/rfc2104
    :)
   if($oauth-signature-method = "HMAC-SHA1")
-  then hmac:sha1($base-string, $key)
+  then xs:string(hmac:sha1($base-string, $key))
   (:
    : RSA-SHA1
    : @see http://tools.ietf.org/html/rfc5849#section-3.4.3