[SHINDIG-1775] oauth_body_hash URL parameter added to all token requests

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.0
• Fix Version/s: 2.5.0, 2.5.0-beta3
• Assignee: Adam Clarke
• Reporter: Ryan Baxter
• Created: 10/May/12 18:00
• Updated: 30/Jul/12 12:23
• Resolved: 25/Jul/12 00:09

Description

Shindig will add the oauth_body_hash URL parameter to all token requests by default. This parameter is not part of the OAuth 1.0a spec but appears in http://oauth.googlecode.com/svn/spec/ext/body_hash/1.0/drafts/4/spec.html. Do to it not being in the spec strict OAuth providers may reject (and have every right to do so) requests including this parameter. We should make the inclusion of this parameter optional via a property in the oauth.json file.