-
Notifications
You must be signed in to change notification settings - Fork 910
Open
Labels
Description
According to http://oauth.net/core/1.0a/#rfc.section.9.1.2, URLs must be normalised before using for signatures.
To fix it, it seems enough to change http://github.com/simplegeo/python-oauth2/blob/master/oauth2/__init__.py#LID292 to read:
self.normalized_url = urlparse.urlunparse((scheme.lower(), netloc.lower(), path, None, None, None))
Otherwise it will break when using URLs like HTTP://Example.com/foo/bar