OAuth1 React Native Reference Documentation

OAuth1

Current Version: 11.6.1

Chilkat.OAuth1

Generate OAuth 1.0 signatures, authorization headers, and signed request URLs.

Chilkat.OAuth1 builds the signed OAuth 1.0 authentication data needed for APIs that still require OAuth 1.0 request signing. It can generate the signature base string, HMAC key, signature, URL-encoded signature, normalized signed parameter string, Authorization header, and generated URL containing OAuth query parameters. It supports consumer credentials, access tokens, nonce and timestamp generation, extra signed parameters, optional realm handling, HMAC-SHA1, HMAC-SHA256, RSA-SHA1, and RSA-SHA256 signing.

OAuth 1.0 signing

Generate the OAuth 1.0 signature and related authentication values from the HTTP method, request URL, credentials, token, nonce, and timestamp.

Authorization header

Produce the value to send in the HTTP Authorization header when OAuth parameters should be supplied as a header.

Signed URL output

Generate a URL that includes the OAuth 1.0 query parameters when the API expects authentication data in the request URL.

Extra signed parameters

Add or remove request-specific name/value parameters that must be included in the normalized parameter string and signature calculation.

HMAC or RSA signatures

Sign with HMAC-SHA1, HMAC-SHA256, RSA-SHA1, or RSA-SHA256, with RSA private keys supplied by SetRsaKey.

Debuggable signing details

Inspect the exact BaseString, HmacKey, QueryString, Signature, and EncodedSignature used to build the OAuth request.

Common pattern: Set OauthMethod and OauthUrl, provide the consumer key and secret, set any token and token secret, generate or assign Nonce and Timestamp, add request parameters with AddParam, then call Generate. Use AuthorizationHeader when sending OAuth data in an HTTP header, or GeneratedUrl when the signed OAuth parameters should be placed in the URL.
URL guidance: Set OauthUrl to the base request URL without query parameters. Add query parameters separately with AddParam so they are included correctly in the OAuth 1.0 signature calculation.

Object Creation

// npm install @chilkat/react-native react-native-nitro-modules
// (React Native 0.76+ with the New Architecture; then `pod install` for iOS.  The Chilkat
//  native library is downloaded and verified during the native build -- see the package README.)

import { Chilkat, OAuth1 } from '@chilkat/react-native'

// Once per app start, before any other Chilkat call:
Chilkat.unlockBundle('Anything for 30-day trial')   // shorthand for new Global().unlockBundle(..)

const oAuth1 = new OAuth1()
// ... the native object is released when `oAuth1` is garbage collected, or now with oAuth1.dispose()
new OAuth1()

Creates the underlying native Chilkat object. OAuth1 is a Nitro Module HybridObject: use it from the JavaScript thread only (it cannot be passed to a Worklet or another runtime). Every member is synchronous and blocks the JavaScript thread until Chilkat returns; a method that can take a while also exists as a ...Async twin returning a Promise, which runs the same call on a native worker thread so the UI keeps rendering. While such a call is pending, every other call on this object throws, except abort() and assigning onPercentDone / onProgressInfo.

dispose(): void

Releases the native object immediately instead of waiting for garbage collection (useful for a large BinData or an open socket). Calling it more than once is harmless; any other use of the object afterwards throws. An object with a pending ...Async call cannot be disposed until the promise settles.

Errors

A method that can fail throws a plain Error: a method whose only outcome is success or failure returns void and throws on failure; a method producing a string or an object returns it and throws where Chilkat would have returned null. The error's message is "Class.method(...): reason", where the reason is the last informative line of the object's lastErrorText, which holds the full Chilkat log of the failed call. A ...Async twin rejects its promise with the same Error instead of throwing. Properties never throw, and methods that answer a question (has..., is..., ...) return a plain boolean.

try {
  oAuth1.someMethod(...)
} catch (e) {
  console.log((e as Error).message)   // OAuth1.someMethod(...): <reason>
  console.log(oAuth1.lastErrorText)   // the full Chilkat log of the failed call
}

// The same call without blocking the JavaScript thread:
try {
  await oAuth1.someMethodAsync(...)
} catch (e) {
  console.log((e as Error).message)   // OAuth1.someMethodAsync: <reason>
}

Properties

AuthorizationHeader
// read-only
readonly authorizationHeader: string
Introduced in version 9.5.0.53

The authorization header. This is what would be included in the Authorization HTTP request header if it is going to be used as the means for providing the OAuth1 authorization information.

top
BaseString
// read-only
readonly baseString: string
Introduced in version 9.5.0.53

This is the exact string that was signed. For example, if the signature method is HMAC-SHA1, the BaseString is the exact string that passed to the HMAC-SHA1. An application does not set the BaseString property. The BaseString is exposed as a property to allow for debugging and to see the exact string that is signed.

top
ConsumerKey
// read/write
consumerKey: string
Introduced in version 9.5.0.53

The consumer key.

top
ConsumerSecret
// read/write
consumerSecret: string
Introduced in version 9.5.0.53

The consumer secret.

top
DebugLogFilePath
// read/write
debugLogFilePath: string

If set to a file path, this property logs the LastErrorText of each Chilkat method or property call to the specified file. This logging helps identify the context and history of Chilkat calls leading up to any crash or hang, aiding in debugging.

Enabling the VerboseLogging property provides more detailed information. This property is mainly used for debugging rare instances where a Chilkat method call causes a hang or crash, which should generally not happen.

Possible causes of hangs include:

  • A timeout property set to 0, indicating an infinite timeout.
  • A hang occurring within an event callback in the application code.
  • An internal bug in the Chilkat code causing the hang.

More Information and Examples
top
EncodedSignature
// read-only
readonly encodedSignature: string
Introduced in version 9.5.0.53

The URL encoded representation of the Signature property

top
GeneratedUrl
// read-only
readonly generatedUrl: string
Introduced in version 9.5.0.53

The URL that includes the OAuth1 query params.

top
HmacKey
// read-only
readonly hmacKey: string
Introduced in version 9.5.0.53

The exact HMAC key used to sign the BaseString. An application does not directly set the HmacKey. The HmacKey property is read-only and is provided for debugging to see the exact HMAC key used to sign the BaseString. The HMAC key is composed from the consumer secret (if it exists) and the token secret (if it exists).

top
LastErrorHtml
// read-only
readonly lastErrorHtml: string

Provides HTML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorText
// read-only
readonly lastErrorText: string

Provides plain text information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorXml
// read-only
readonly lastErrorXml: string

Provides XML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastMethodSuccess
// read/write
lastMethodSuccess: boolean

Indicates the success or failure of the most recent method call: true means success, false means failure. This property remains unchanged by property setters or getters. This method is present to address challenges in checking for null or Nothing returns in certain programming languages. Note: This property does not apply to methods that return integer values or to boolean-returning methods where the boolean does not indicate success or failure.

top
Nonce
// read/write
nonce: string
Introduced in version 9.5.0.53

The nonce.

top
OauthMethod
// read/write
oauthMethod: string
Introduced in version 9.5.0.53

The HTTP method, such as GET, POST, PUT, DELETE, or HEAD. Defaults to GET.

top
OauthUrl
// read/write
oauthUrl: string
Introduced in version 9.5.0.53

The OAuth URL, such as http://echo.lab.madgex.com/echo.ashx. See http://bettiolo.github.io/oauth-reference-page/ to compare Chilkat results with another tool's results.

Note: The OAuthUrl should not include query parameters. For example, do not set the OAuthUrl equal to

https://rest.sandbox.netsuite.com/app/site/hosting/restlet.nl?script=165&deploy=1
Instead, set OAuthUrl equal to
https://rest.sandbox.netsuite.com/app/site/hosting/restlet.nl
and then subsequently call AddParam for each query parameter.

top
OauthVersion
// read/write
oauthVersion: string
Introduced in version 9.5.0.53

The oauth_version. Defaults to 1.0. May be set to the empty string to exclude.

top
QueryString
// read-only
readonly queryString: string
Introduced in version 9.5.0.53

Contains the normalized set of request parameters that are signed. This is a read-only property made available for debugging purposes.

top
Realm
// read/write
realm: string
Introduced in version 9.5.0.70

The realm (optional).

top
Signature
// read-only
readonly signature: string
Introduced in version 9.5.0.53

The generated base64 signature.

top
SignatureMethod
// read/write
signatureMethod: string
Introduced in version 9.5.0.53

The signature method. Defaults to HMAC-SHA1. Other possible choices are HMAC-SHA256, RSA-SHA1, and RSA-SHA256 (or the equivalent RSA-SHA2).

More Information and Examples
top
Timestamp
// read/write
timestamp: string
Introduced in version 9.5.0.53

The timestamp, such as 1441632569.

top
Token
// read/write
token: string
Introduced in version 9.5.0.53

The token.

top
TokenSecret
// read/write
tokenSecret: string
Introduced in version 9.5.0.53

The token secret

top
UncommonOptions
// read/write
uncommonOptions: string
Introduced in version 9.5.0.85

This is a catch-all property to be used for uncommon needs. This property defaults to the empty string and should typically remain empty.

Can be set to a list of the following comma separated keywords:

  • INCLUDE_REALM - Introduced in v9.5.0.85. Include the Realm in the signature calculation and outputs.

top
VerboseLogging
// read/write
verboseLogging: boolean

If set to true, then the contents of LastErrorText (or LastErrorXml, or LastErrorHtml) may contain more verbose information. The default value is false. Verbose logging should only be used for debugging. The potentially large quantity of logged information may adversely affect peformance.

top
Version
// read-only
readonly version: string

Version of the component/library, such as "10.1.0"

More Information and Examples
top

Methods

AddParam
addParam(name: string, value: string): void
Introduced in version 9.5.0.53

Adds an extra name/value parameter to the OAuth1 signature.

Returns normally on success; throws an Error on failure.

More Information and Examples
top
Generate
generate(): void
Introduced in version 9.5.0.53

Generate the signature based on the property settings. Input properties are OauthVersion, OauthMethod, Url, ConsumerKey, ConsumerSecret, Token, TokenSecret, Nonce, and Timestamp. Properties set by this method include: BaseString, Signature, HmacKey, EncodedSignature, QueryString, GeneratedUrl, andAuthorizationHeader.

Returns normally on success; throws an Error on failure.

More Information and Examples
top
GenNonce
genNonce(numBytes: number): void
Introduced in version 9.5.0.55

Generates a random nonce numBytes in length and sets the Nonce property to the hex encoded value.

Returns normally on success; throws an Error on failure.

top
GenTimestamp
genTimestamp(): void
Introduced in version 9.5.0.55

Sets the Timestamp property to the current date/time.

Returns normally on success; throws an Error on failure.

top
RemoveParam
removeParam(name: string): void
Introduced in version 9.5.0.53

Removes a name/value parameter from the OAuth1 signature.

Returns normally on success; throws an Error on failure.

top
SetRsaKey
setRsaKey(privKey: PrivateKey): void
Introduced in version 9.5.0.64

Sets the RSA key to be used when the SignatureMethod is set to RSA-SHA1 or RSA-SHA2.

Returns normally on success; throws an Error on failure.

top