I am working with java, I got oauth token

String yahooLogin = "https://api.login.yahoo.com/oauth/v2/"
+ "request_auth?" + "oauth_token="+ yahooOauth_token

I send it to my javascript from java to open a new window
window.open(yahooLogin,'Yahoo Login','scrollbars=yes,resizable=yes, width=650,height=400')

but now I am confused, how would I get oauth_verifier. Once I click on complete button on yahoo login, I go get another window with www.site.com/oauth_token=ewvee2n&oauth_verifier=hqjqyh. But I dont know, how can I capture that response in my javascript.

Thanks ,
Sharan

Can you use document.location to get at the url?

Be sure you're setting the OAuth callback_url correctly too, so the OAuth provider can send the verifier back to the file containing your JavaScript.

Thanks, Eric. I was able to get the callback. Now I am stuck at getting contacts. In Yahoo contact api, it just mentions that we need to make a with guid: http://social.yahooapis.com/v1/user/"+ guid +"/contacts"; I am doing that, but get this error: <yahoo:description>Please provide valid credentials. OAuth oauth_problem="unable_to_determine_oauth_type", realm="yahooapis.com"</yahoo:description>

Right - I wasn't suggesting that the social directory API could be used for the e-mail address, just the user's profile - my apologies for that confusion. The Contacts API, however, can be used to capture the e-mail addresses of your address book contacts, if available. I just tested this out and it works so you can use that for obtaining those e-mails. The only problem here is that the user will have had to have added an e-mail for that contact.

- Jon

The host for the OAuth requests should be http://api.del.icio.us, not https://api.del.icio.us.
Hopefully that's all.

Chris

Thanks I just tried that. I re-coded my delicious request to use GET instead of POST. I'm just trying whatever I can to make it work.
I get the invalid signature error.

Here is my plain text signature:

CODE

GET&http%3A%2%2Fapi.del.icio.us%2Fv2%2Fposts%2Fadd
&description%3DTest
%26oauth_callback%3Doob
%26oauth_consumer_key%3D{removed}
%26oauth_nonce%3D3fcff6d54e498592716fdd5fcf00e43579e42b86
%26oauth_signature_method%3DHMAC-SHA1
%26oauth_timestamp%3D1265328235
%26oauth_token%3DA%3DTRn7ShHjpwOQqAqA62.vI7VVEPSN0Rvh_J2TzgGHfKS_9_j_ES4ZJYDeaTzONJAI_Zrihe2ekxinis
SxQk5vaB1sLxTHm9wzfY0TJ87rhQYVJ6JYEamueDcHpQ6Unp_Bo2ptV9Aw9cwCXm81ovMvHMBhHPLJ6I
F
M63XU2gWaFUkoa6RiM.E7eAPtoMzHWxjTg1v8IWd7NJGfh.MDQQTCPC837yBCN8nPb6y8h.dRThLauxT
3
27sNQ0TQpjM0TIlGT9Byo_jJjIArzsgJBdREqWlDje_w6WU1JW4N5mdsdWuM.jV9OFN7m8E518_2pK8z
0
Qe68ZZlx6iKUsorApAxhWU9gHbDHiFX7qcz2Dv8iGRaMSEPC5SNTsMgWpWYeC.PStxaIJi2Uj0BNQOLr
e
wcv7B1k2b0vUxbcBe_XyGrG3LSQ5tRoG2aXPw.KB15E0NyaBk5JIoWbCm3Lfhn7A2DkO31HD3Ui0nz11
l
x.Px.BURs.uyuK1rt4k3BN_l2wprjHOcg7ZPj.H9IYeDGeS0MCoBpUzgkzLoLzOBmVUx7agKkOkaQ41Z
u
.tUbqrxj4AxIM7cOFOwbacw8YlYot22vQAUTJnejHofTuktXGL4floyDuhQ9tv6Qsc5oRwx03vBf5Pdq
3
MKxd8IwiNLMbvL5n9JtEr0Tw1PjXGqciF9Us3gAxiyuMAPJa7al2eCiMYeg6B8K1viXIryVIgSVCMhY0
n
y4F2qQmYvHbaIGpZU9j3nGJt.i1Ug-
%26oauth_version%3D1.0
%26url%3Dhttp%3A%2F%2Fgoogle.com

I encode this using HMAC-SHA1. The algorithm works perfect for Twitter, so I'm certain it isn't the plaintext to encrypted process.
Also, I've tried using unencoded &'s inbetween each parameter. Finally, I also tried using %26 inbetween each parameters (including the GET and url, and url and the first parameter).

Anything missing or wrong in this header?

Hi Will,

It looks like your Base String is not correctly built.
When you build the string with all the parameters, you need to ensure the values are url-encoded. From above, you have:
%26url%3Dhttp%3A%2F%2Fgoogle.com
whereas it should be
%26url%3Dhttp%253A%252F%252Fgoogle.com

You need to build it up as param1=<urlencoded value1>¶m2=<urlencoded value 2> etc
and then url-encode the whole string (as you have done above).

Chris

I am using http://blog.floehopper.org/articles/2010/0...g-the-oauth-gem and had it work successfully once...

For the last 4 days Ihave been getting this error:

Yahoo! is experiencing some difficulties in processing your request. This is most probably a temporary technical issue, so please try again shortly. [95021]

Is anyone else having this issue?

Please wait AT LEAST ONE SECOND between queries, or you are likely to get automatically throttled. If you are releasing a library to access the API, you MUST do this. Please watch for 500 or 999 errors and back-off appropriately. It means that you have been throttled.

I am experiencing server hangup for more than a week trying to access Stock Historical data. m y computer is runing Wndows7.
While on a coputer running Windows Vista this probelm does not arises....

anyone has a soution o this problem..?

I just want to make a script that posts some links to my own delicious account. It will never be used for another delicious account. Before Yahoo, this was so easy.

So, after getting my request token, I create my yahoo log in url in the form:

CODE

echo "<p><a href=\"";
echo $xoauth_request_auth_url;
echo "&oauth_nonce=".$nonce;
echo "&oauth_timestamp=".$timestamp;
echo "&oauth_consumer_key=".$consumer_key;
echo "&oauth_signature_method=plaintext&oauth_signature=".$secret."%26";
echo "&oauth_version=1.0&xoauth_lang_pref=en-us&oauth_callback=".callback;
echo "\">Log In</a></p>";

For callback, I have tried with and without my domain. Both times, after logging in, I'm sent to a yahoo page:
https://api.login.yahoo.com/oauth/v2/AQEar/...verifier=wq6yu9

that AQEar/yahoo/delicious_post is my callback, but why does it not send this back to my own domain? If api.login.yahoo etc. was replaced with my domain, I could proceed to the next step. I'm pretty sure once i get the verifier, I'd be just fine, but the verifier never comes back to my script.

Also, when getting my request token, if I provide the domain in that callback url, I get an OAuth Error: Custom port is not allowed or the host is not registered with this consumer key.

It's not a custom port, so it must be the host not being registered. My consumer key is correct. The Application URL in Yahoo's Project Details is the full (domain included) url of my script. Where else can I "register" my domain with this consumer key?

If anyone has any ideas, I would be extremely grateful.
Thank you.
-Ed

I am trying to make the yahoo.application.OAuthApplication.refresh_access_token using the python sdk. Below is the stack trace when i make the call. Basically yahoo API complains that oauth_parameters are missing. Can anyone help me debug this issue.

Thanks
Vivek Puri

CODE

12-27 05:53PM 05.498
fetch_access_token oauth_request.to_header('yahooapis.com'): {'Authorization': 'OAuth realm="yahooapis.com", oauth_nonce="24743187", oauth_session_handle="session handle here", oauth_consumer_key="consumer key here", oauth_timestamp="1261965185", oauth_signature_method="PLAINTEXT", oauth_version="1.0", oauth_token="valid token here", oauth_signature="valid sig here"'}
I 12-27 05:53PM 05.800
fetch_access_token request HTTP status code: 401
I 12-27 05:53PM 05.953
fetch_access_token request HTTP response content: oauth_problem=parameter_absent&oauth_parameters_absent=oauth_consumer_key,oauth_token,oauth_signature_metho
d,oauth_signature,oauth_timestamp,oauth_nonce
E 12-27 05:53PM 05.953
from_string() takes exactly 1 argument (0 given)
Traceback (most recent call last):
  File "/base/python_lib/versions/1/google/appengine/ext/webapp/__init__.py", line 507, in __call__
    handler.get(*groups)
  File "/base/data/home/apps/linksalpha/116.338756193947541816/api/pubyahoo.py", line 25, in get
    oauthapp.token = oauthapp.refresh_access_token(oauthapp.token)
  File "/base/data/home/apps/linksalpha/116.338756193947541816/yahoo/application.py", line 88, in refresh_access_token
    self.token = self.client.fetch_access_token(request)
  File "/base/data/home/apps/linksalpha/116.338756193947541816/yahoo/oauth.py", line 172, in fetch_access_token
    return AccessToken.from_string()
TypeError: from_string() takes exactly 1 argument (0 given)

Hi Vivek,

It looks like there was an oauth error that was not handled properly. I checked the tests and they work as expected for the python sdk, can you provide the complete http request/response?

i am trying ot connect with yahoo oauth.
when i specify the callback url to be: http://lehavi.com/YahooOauth.aspx everything works fine.
but when i specify http://lehavi.com:2358/YahooOauth.aspx it does not work.
my application url is http://lehavi.com:2358.

what can the problem be?

I figured out the issue! So for all of you that have been unable to get this to work, my pitfall was during the registration process. In the input box that requires a domain name make sure that you make it http://www.domain.com. Then in the call back function of the get_request_token make sure it is http://www.domain.com/index.php.

Hi,

I am developing a client/desktop application for delicious and it is not completely clear to me how to obtain an oauth access token. All of the examples I have seen posted assume it is a web application. I have registered an app and have a consumer and a secret key, etc. I am not entirely clear how to get the describe flow of information given that I have no callback url and a domain was not registered for said key pair.

Thanks!
ttyl
Dima

I am simply trying to get the instructions found here: http://delicious.com/help/oauthapi and here: http://developer.yahoo.com/oauth/guide/oauth-auth-flow.html to work.

I am hung up on step four.

Delicious says to set up the URL like this:

CODE

https://api.login.yahoo.com/oauth/v2/get_token?
oauth_consumer_key=<your consumer key>
&oauth_signature_method=PLAINTEXT
&oauth_version=1.0
&oauth_verifier=<oauth_verifier>
&oauth_token=<request_token>
&oauth_nonce=<random string>
&oauth_timestamp=<current timestamp>
&oauth_signature=<your consumer key>%26<your shared secret>

This seems rather straight forward but every time I get this error "oauth_problem=signature_invalid".

I was looking at the example on the Yahoo page and it shows this:

CODE

https://api.login.yahoo.com/oauth/v2/get_token?oauth_consumer_key=dj0yJmk9NG5USlVvTlZsZEpnJmQ9WVdrOVQwa
    zFPRUozTkc4bWNHozlNVE13TXprM01UUTBNZy0tJnM9Y29uc3VtZXJzZWNyZXQmeD1kNg--
  &oauth_signature_method=PLAINTEXT
  &oauth_version=1.0
  &oauth_verifier=svmhhd
  &oauth_token=gugucz&oauth_timestamp=1228169662
  &oauth_nonce=8B9SpF
  &oauth_signature=5f78507cf0acc38890cf5aa697210822e90c8b1c%261fa61b464613d0d32de80089fe099caf34c9dac5

If you compare what delicious says to put for oauth_signature and yahoo's example, it doesn't add up. The portion before the "%26" is not the consumer key just a few lines above.

Anyone got any ideas on how to actually form this url?

I am simply trying to get the instructions found here: http://delicious.com/help/oauthapi and here: http://developer.yahoo.com/oauth/guide/oauth-auth-flow.html to work.

I am hung up on step four.

Delicious says to set up the URL like this:

CODE

https://api.login.yahoo.com/oauth/v2/get_token?
oauth_consumer_key=<your consumer key>
&oauth_signature_method=PLAINTEXT
&oauth_version=1.0
&oauth_verifier=<oauth_verifier>
&oauth_token=<request_token>
&oauth_nonce=<random string>
&oauth_timestamp=<current timestamp>
&oauth_signature=<your consumer key>%26<your shared secret>

This seems rather straight forward but every time I get this error "oauth_problem=signature_invalid".

I was looking at the example on the Yahoo page and it shows this:

CODE

https://api.login.yahoo.com/oauth/v2/get_token?oauth_consumer_key=dj0yJmk9NG5USlVvTlZsZEpnJmQ9WVdrOVQwa
    zFPRUozTkc4bWNHozlNVE13TXprM01UUTBNZy0tJnM9Y29uc3VtZXJzZWNyZXQmeD1kNg--
  &oauth_signature_method=PLAINTEXT
  &oauth_version=1.0
  &oauth_verifier=svmhhd
  &oauth_token=gugucz&oauth_timestamp=1228169662
  &oauth_nonce=8B9SpF
  &oauth_signature=5f78507cf0acc38890cf5aa697210822e90c8b1c%261fa61b464613d0d32de80089fe099caf34c9dac5

If you compare what delicious says to put for oauth_signature and yahoo's example, it doesn't add up. The portion before the "%26" is not the consumer key just a few lines above.

Anyone got any ideas on how to actually form this url?

I was seeing the same response. Make sure you have the same domain in your callback_url as the one you configured your app with. As soon as I changed this it worked for me. However, I'm not if this is the only issue you're facing.

The one thing which is wonky with how Yahoo implements this pattern is its impossible to the entire flow locally on a dev machine unless you change your dns settings.

I like to run all my development using example.com as my root domain. The verify process for Yahoo OAuth makes this impossible to verify since example.com isn't an allowed domain.

Anyway, I hope this helps.

-greg

Read this one, it may help you.
http://developer.yahoo.net/forum/index.php...&#entry9916

My experience:
get requestoken and get access token => use plain text for simplicity

when you have access token, you MUST USE HMACSHA1.

You should use OAuth for desktop applications. At some point the user must verify that your application is authorized and type in an oauth verifier code.

How does one obtain an oauth verifier code for a desktop application? If seems that this is the missing golden nugget in a number of these oauth threads.

Thanks!
ttyl
Dima

A few things - have you checked the consumer key to make sure that it is completely the same? Sometimes if you manually copy the keys there are a few dashes that get left off. Also, have you created a profile at profiles.yahoo.com? If neither of those are the cause can you please post your sample code that is failing? I'll take a look.

Jonathan LeBlanc
Technology Evangelist
Yahoo! Developer Network
Twitter: jcleblanc

Hi,
there was an issue due to the timestamp.
It works fine now.
But how do we get to edit and update the contacts.
Can you please help.

i have filled up the form required for that which was mentioned on this link.
http://developer.yahoo.com/social/contacts/

This is where i filled up the form
http://developer.yahoo.com/register/

Is that all i need to do.?

Please help!!

Thanks
karamveer.

Karamvir,

Could you post the whole source code and what you did in order to make it work? I can't seem to get the sampleapp to work (It keeps returning null) and I'm completely clueless as to how to fix it.

Hi,

I'm attempting to initiate the OAuth dance by making a GET call to the request_token endpoint, https://api.login.yahoo.com/oauth/v2/get_request_token. I've included all of the relevant parameters in the GET query string. Unfortunately, the call results in a 200 rather than doing something to prompt me for authorization. I get the same behavior regardless of my logged-in / logged-out of Yahoo state. Interestingly, the 200 response comes back with query parameters which would otherwise end up appended to the callback URL are dumped in the response body.

Does anybody have any idea what's going on here? If I screw up the parameters in other interesting ways, I get a 401 rather than a 200, so it seems that my request is constructed correctly, but for some reason the OAuth server isn't behaving as I'm expecting.

Check it out:

GET /oauth/v2/get_request_token?oauth_nonce=28042247&oauth_timestamp=1259077288&oauth_consumer_key=dj0yJmk9eTVoMnNFbHBlbVQ0JmQ9WVdrOVkzcEtNR3QwTXpnbWNHbzlOa
kkxTXprd05qZzEmcz1jb25zdW1lcnNlY3JldCZ4PWQ1&oauth_signature_method=HMAC-SHA1&oauth_version=1.0&oauth_signature=Ii%2FTgDG%2F65G2NmH0gixmUObUMck%3D&xoauth_lang_pref=en-us&oauth_callback=http%3A%2F%2Fwww.yttrium.ws%2F HTTP/1.1
Host: api.login.yahoo.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.5) Gecko/20091102 YFF35 Firefox/3.5.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive

HTTP/1.1 200 OK
Date: Tue, 24 Nov 2009 15:41:29 GMT
P3P: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Connection: close
Transfer-Encoding: chunked
Content-Type: text/plain; charset=utf-8

oauth_token=eyxt4jr&oauth_token_secret=4edc80f935dd2cf4f1ad57db1200ba8f1e8f62d3&oauth_expires_in=3600&xoauth_request_auth_url=https%3A%2F%2Fapi.login.yahoo.com%2Foauth%2Fv2%2Frequest_auth%3Foauth_token%3Deyxt4jr&oauth_callback_confirmed=true

Thanks,
Peter

I finally reverted back to the php yahoo sdk, and this is a very important note.

$yahoo_session = YahooSession::requireSession(API_KEY, SHARED_SECRET, APP_ID, 'http://sitesdomain.com/');

YOU MUST specify the domain that you used to sign up as the key. Trying to do:

$yahoo_session = YahooSession::requireSession(API_KEY, SHARED_SECRET);

will fail.

Can you confirm the consumer key and shared secret? Generally, this means the consumer key you specified was invalid.

There is no need for the hostility mrbeefx. What Dustin was referring to was when you created your application you were given a series of keys. This error generally means there is a mismatch between the consumer key and secret keys you were given. Please check to make sure the consumer and secret keys that you are using from your application are correctly copied over.

- Jon

I have plenty of users using my application hosted at example.com . I want to move my app to newdomain.com .

OAuth isn't accepting a callback on newdomain.com for my existing key, and a new key can't use the access tokens granted from the previous key.

I can't make all my users re-authenticate.

Can you handle this?

Sorry for the re-post but I don't see how to revive a loose thread, and we're hoping to launch our integration soon. In the oauth login flow, after the user has logged-out of our site, is there any way to force him to re-enter his Yahoo password without receiving the confirmation email again? It seems like I can either

1. not use the (cached) access token, but this sends the confirmation email again
2. use the access token (whether or not it has expired), but this doesn't require the password (an expired token is refreshed by the PHP SDK)

thanks again,
John

Hi, I'm integrating our site with oauth and I've got it working, but one annoying thing is that users keep getting the "Your Yahoo! account is now linked with ..." email. To be clear, after clicking on the "login with yahoo" button on our site and entering his yahoo password, the user sees a "You have successfully linked your Yahoo! Account with ..." page and receives the email. This happens every time he logs-in. Is there any way to have this email sent just once on the first linking?

thanks,
John

When linking the account with Yahoo!, you should store the yahoo guid/access tokens on your server and manually refresh the access token when needed. See more information in the oauth/open id tutorials: http://developer.yahoo.com/oauth/guide/

- Dustin