Finally I have figured out the solution in Javascript only.The signature.html from the sample
http://oauth.googlecode.com/svn/code/javas.../signature.html was really helpful to fix this issue.
The main fix was the Access token send to yahoo which should be decoded correctly in JS which was different from Java.
I have provided the code snippet here in HTML which you can verify in IE browser(I am not sure why it didn't work in other browsers)
But any way the main concept of javascript will work fine- I have added a text area to display the contacts in XML format using AJAX.
Provide the necessary values and check whether the values are coming correctly using the alerts.
The URL here is to access the Contacts from Yahoo API i.e:
http://social.yahooapis.com/v1/user/".../contacts" JS Code
-------------
<HTML>
<head>
<script type="text/javascript" src="http://oauth.googlecode.com/svn/code/javascript/sha1.js"></script>
<script type="text/javascript" src="http://oauth.googlecode.com/svn/code/javascript/oauth.js"></script>
</head>
<script language="javascript">
var oauth_consumer_key ="<Provide your Consumer Key here>";
var oauth_token = "<Provide your Access Token here>"; // This should be double decoded- if it stars with A%25%25%3DkLa, it should be A=kLa
var consumerSecret = "<Provide your Consumer Secret here>";
var tokenSecret = "<Provide your Token Secret here>";
var guid = "<Provide your Yahoo GUID here>";
var timeStamp1 = OAuth.timestamp();
var nonce1 = OAuth.nonce(11);
var accessor = { consumerSecret: consumerSecret
, tokenSecret : tokenSecret};
var message = { method: "GET"
, action: "http://social.yahooapis.com/v1/user/"+guid+"/contacts"
,parameters:[]
};
message.parameters.push(["oauth_version","1.0"]);
message.parameters.push(["oauth_consumer_key",oauth_consumer_key]);
message.parameters.push(["oauth_token",oauth_token]);
message.parameters.push(["oauth_timestamp",timeStamp1]);
message.parameters.push(["oauth_nonce",nonce1]);
message.parameters.push(["oauth_signature_method","HMAC-SHA1"]);
OAuth.SignatureMethod.sign(message, accessor);
var key = OAuth.percentEncode(consumerSecret) +"&"+OAuth.percentEncode(tokenSecret);
var signature = b64_hmac_sha1(key,OAuth.SignatureMethod.getBaseString(message));
alert("Signature: " +signature);
alert("NormalizedParameters : "+ OAuth.SignatureMethod.normalizeParameters(message.parameters));
alert("SignatureBaseString : " + OAuth.SignatureMethod.getBaseString(message));
alert("Signature : " + OAuth.getParameter(message.parameters, "oauth_signature"));
alert("AuthorizationHeader : " + OAuth.getAuthorizationHeader("http://yahooapis.com/", message.parameters));
alert("URL : " + "http://social.yahooapis.com/v1/user/"+guid+"/ contacts?"+OAuth.SignatureMethod.normalizeParameters(message.parameters)
+"&oauth_signature="+OAuth.percentEncode(OAuth.getParameter(message.parameters,'oauth_signature')));
var url ="http://social.yahooapis.com/v1/user/"+guid+"/contacts?"+OAuth.SignatureMethod.normalizeParameters(message.parameters)
+"&oauth_signature="+OAuth.percentEncode(OAuth.getParameter(message.parameters,'oauth_signature'));
xmlhttpPost(url);
function xmlhttpPost(strURL) {
var xmlHttpReq = false;
var self = this;
// Mozilla/Safari
if (window.XMLHttpRequest) {
self.xmlHttpReq = new XMLHttpRequest();
}
// IE
else if (window.ActiveXObject) {
self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP");
}
self.xmlHttpReq.open('GET', strURL, true);
self.xmlHttpReq.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');
self.xmlHttpReq.setRequestHeader('Authorization', 'OAuth');
self.xmlHttpReq.onreadystatechange = function() {
if (self.xmlHttpReq.readyState == 4) {
updatepage(self.xmlHttpReq.responseText);
}
}
self.xmlHttpReq.send();
}
function updatepage(str){
document.getElementById("oauthBox").value += str;
}
</script>
<body>
<textarea id="oauthBox" rows=20 cols=120></textarea>
</body>
</HTML>
Hope this helps to satisfy the hunger for Yahoo OAuth using Javascript.
Thanks,
Test SCF
