OAuth1 Rust Reference Documentation

OAuth1

Current Version: 11.6.1

Chilkat.OAuth1

Generate OAuth 1.0 signatures, authorization headers, and signed request URLs.

Chilkat.OAuth1 builds the signed OAuth 1.0 authentication data needed for APIs that still require OAuth 1.0 request signing. It can generate the signature base string, HMAC key, signature, URL-encoded signature, normalized signed parameter string, Authorization header, and generated URL containing OAuth query parameters. It supports consumer credentials, access tokens, nonce and timestamp generation, extra signed parameters, optional realm handling, HMAC-SHA1, HMAC-SHA256, RSA-SHA1, and RSA-SHA256 signing.

OAuth 1.0 signing

Generate the OAuth 1.0 signature and related authentication values from the HTTP method, request URL, credentials, token, nonce, and timestamp.

Authorization header

Produce the value to send in the HTTP Authorization header when OAuth parameters should be supplied as a header.

Signed URL output

Generate a URL that includes the OAuth 1.0 query parameters when the API expects authentication data in the request URL.

Extra signed parameters

Add or remove request-specific name/value parameters that must be included in the normalized parameter string and signature calculation.

HMAC or RSA signatures

Sign with HMAC-SHA1, HMAC-SHA256, RSA-SHA1, or RSA-SHA256, with RSA private keys supplied by SetRsaKey.

Debuggable signing details

Inspect the exact BaseString, HmacKey, QueryString, Signature, and EncodedSignature used to build the OAuth request.

Common pattern: Set OauthMethod and OauthUrl, provide the consumer key and secret, set any token and token secret, generate or assign Nonce and Timestamp, add request parameters with AddParam, then call Generate. Use AuthorizationHeader when sending OAuth data in an HTTP header, or GeneratedUrl when the signed OAuth parameters should be placed in the URL.
URL guidance: Set OauthUrl to the base request URL without query parameters. Add query parameters separately with AddParam so they are included correctly in the OAuth 1.0 signature calculation.

Object Creation

// Cargo.toml:
//     [dependencies]
//     chilkat = "11.6"

use chilkat::OAuth1;

// Once per process, before any other Chilkat call:
chilkat::unlock_bundle("Anything for 30-day trial")?;  // shorthand for Global::new().unlock_bundle(..)

let o_auth1 = OAuth1::new();
// ... the native object is freed when `o_auth1` goes out of scope.
pub fn new() -> OAuth1

Creates the underlying native Chilkat object (OAuth1 also implements Default). Every method takes &self, so the object never needs to be declared mut. A OAuth1 is Send but not Sync: it may be moved to another thread, but a reference to it cannot be shared between threads at the same time.

impl Drop for OAuth1

The native object is freed when the OAuth1 is dropped — when it goes out of scope, or explicitly with drop(o_auth1). There is no Dispose method to call.

Errors

Methods that can fail return chilkat::Result<T>, which is Result<T, chilkat::Error>: a method whose only outcome is success or failure returns Result<()>, a method producing a string or an object returns Result<String> or Result<OAuth1>. The error carries the object's LastErrorText at the time of the failure (Error::last_error_text), the class and method names, and implements std::error::Error, so ? works in any function returning chilkat::Result or a Box<dyn Error>. Properties never fail, and methods that answer a question (has_..., is_..., ...) return a plain bool.

match o_auth1.some_method(...) {
    Ok(value) => println!("{value:?}"),
    Err(e) => eprintln!("{}", e.last_error_text()),
}

Properties

AuthorizationHeader
// read-only
pub fn authorization_header(&self) -> String
Introduced in version 9.5.0.53

The authorization header. This is what would be included in the Authorization HTTP request header if it is going to be used as the means for providing the OAuth1 authorization information.

top
BaseString
// read-only
pub fn base_string(&self) -> String
Introduced in version 9.5.0.53

This is the exact string that was signed. For example, if the signature method is HMAC-SHA1, the BaseString is the exact string that passed to the HMAC-SHA1. An application does not set the BaseString property. The BaseString is exposed as a property to allow for debugging and to see the exact string that is signed.

top
ConsumerKey
// read/write
pub fn consumer_key(&self) -> String
pub fn set_consumer_key(&self, value: &str)
Introduced in version 9.5.0.53

The consumer key.

top
ConsumerSecret
// read/write
pub fn consumer_secret(&self) -> String
pub fn set_consumer_secret(&self, value: &str)
Introduced in version 9.5.0.53

The consumer secret.

top
DebugLogFilePath
// read/write
pub fn debug_log_file_path(&self) -> String
pub fn set_debug_log_file_path(&self, value: &str)

If set to a file path, this property logs the LastErrorText of each Chilkat method or property call to the specified file. This logging helps identify the context and history of Chilkat calls leading up to any crash or hang, aiding in debugging.

Enabling the VerboseLogging property provides more detailed information. This property is mainly used for debugging rare instances where a Chilkat method call causes a hang or crash, which should generally not happen.

Possible causes of hangs include:

  • A timeout property set to 0, indicating an infinite timeout.
  • A hang occurring within an event callback in the application code.
  • An internal bug in the Chilkat code causing the hang.

More Information and Examples
top
EncodedSignature
// read-only
pub fn encoded_signature(&self) -> String
Introduced in version 9.5.0.53

The URL encoded representation of the Signature property

top
GeneratedUrl
// read-only
pub fn generated_url(&self) -> String
Introduced in version 9.5.0.53

The URL that includes the OAuth1 query params.

top
HmacKey
// read-only
pub fn hmac_key(&self) -> String
Introduced in version 9.5.0.53

The exact HMAC key used to sign the BaseString. An application does not directly set the HmacKey. The HmacKey property is read-only and is provided for debugging to see the exact HMAC key used to sign the BaseString. The HMAC key is composed from the consumer secret (if it exists) and the token secret (if it exists).

top
LastErrorHtml
// read-only
pub fn last_error_html(&self) -> String

Provides HTML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorText
// read-only
pub fn last_error_text(&self) -> String

Provides plain text information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorXml
// read-only
pub fn last_error_xml(&self) -> String

Provides XML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastMethodSuccess
// read/write
pub fn last_method_success(&self) -> bool
pub fn set_last_method_success(&self, value: bool)

Indicates the success or failure of the most recent method call: true means success, false means failure. This property remains unchanged by property setters or getters. This method is present to address challenges in checking for null or Nothing returns in certain programming languages. Note: This property does not apply to methods that return integer values or to boolean-returning methods where the boolean does not indicate success or failure.

top
Nonce
// read/write
pub fn nonce(&self) -> String
pub fn set_nonce(&self, value: &str)
Introduced in version 9.5.0.53

The nonce.

top
OauthMethod
// read/write
pub fn oauth_method(&self) -> String
pub fn set_oauth_method(&self, value: &str)
Introduced in version 9.5.0.53

The HTTP method, such as GET, POST, PUT, DELETE, or HEAD. Defaults to GET.

top
OauthUrl
// read/write
pub fn oauth_url(&self) -> String
pub fn set_oauth_url(&self, value: &str)
Introduced in version 9.5.0.53

The OAuth URL, such as http://echo.lab.madgex.com/echo.ashx. See http://bettiolo.github.io/oauth-reference-page/ to compare Chilkat results with another tool's results.

Note: The OAuthUrl should not include query parameters. For example, do not set the OAuthUrl equal to

https://rest.sandbox.netsuite.com/app/site/hosting/restlet.nl?script=165&deploy=1
Instead, set OAuthUrl equal to
https://rest.sandbox.netsuite.com/app/site/hosting/restlet.nl
and then subsequently call AddParam for each query parameter.

top
OauthVersion
// read/write
pub fn oauth_version(&self) -> String
pub fn set_oauth_version(&self, value: &str)
Introduced in version 9.5.0.53

The oauth_version. Defaults to 1.0. May be set to the empty string to exclude.

top
QueryString
// read-only
pub fn query_string(&self) -> String
Introduced in version 9.5.0.53

Contains the normalized set of request parameters that are signed. This is a read-only property made available for debugging purposes.

top
Realm
// read/write
pub fn realm(&self) -> String
pub fn set_realm(&self, value: &str)
Introduced in version 9.5.0.70

The realm (optional).

top
Signature
// read-only
pub fn signature(&self) -> String
Introduced in version 9.5.0.53

The generated base64 signature.

top
SignatureMethod
// read/write
pub fn signature_method(&self) -> String
pub fn set_signature_method(&self, value: &str)
Introduced in version 9.5.0.53

The signature method. Defaults to HMAC-SHA1. Other possible choices are HMAC-SHA256, RSA-SHA1, and RSA-SHA256 (or the equivalent RSA-SHA2).

More Information and Examples
top
Timestamp
// read/write
pub fn timestamp(&self) -> String
pub fn set_timestamp(&self, value: &str)
Introduced in version 9.5.0.53

The timestamp, such as 1441632569.

top
Token
// read/write
pub fn token(&self) -> String
pub fn set_token(&self, value: &str)
Introduced in version 9.5.0.53

The token.

top
TokenSecret
// read/write
pub fn token_secret(&self) -> String
pub fn set_token_secret(&self, value: &str)
Introduced in version 9.5.0.53

The token secret

top
UncommonOptions
// read/write
pub fn uncommon_options(&self) -> String
pub fn set_uncommon_options(&self, value: &str)
Introduced in version 9.5.0.85

This is a catch-all property to be used for uncommon needs. This property defaults to the empty string and should typically remain empty.

Can be set to a list of the following comma separated keywords:

  • INCLUDE_REALM - Introduced in v9.5.0.85. Include the Realm in the signature calculation and outputs.

top
VerboseLogging
// read/write
pub fn verbose_logging(&self) -> bool
pub fn set_verbose_logging(&self, value: bool)

If set to true, then the contents of LastErrorText (or LastErrorXml, or LastErrorHtml) may contain more verbose information. The default value is false. Verbose logging should only be used for debugging. The potentially large quantity of logged information may adversely affect peformance.

top
Version
// read-only
pub fn version(&self) -> String

Version of the component/library, such as "10.1.0"

More Information and Examples
top

Methods

AddParam
pub fn add_param(&self, name: &str, value: &str) -> Result<()>
Introduced in version 9.5.0.53

Adds an extra name/value parameter to the OAuth1 signature.

Returns Ok(()) for success, Err(chilkat::Error) for failure.

More Information and Examples
top
Generate
pub fn generate(&self) -> Result<()>
Introduced in version 9.5.0.53

Generate the signature based on the property settings. Input properties are OauthVersion, OauthMethod, Url, ConsumerKey, ConsumerSecret, Token, TokenSecret, Nonce, and Timestamp. Properties set by this method include: BaseString, Signature, HmacKey, EncodedSignature, QueryString, GeneratedUrl, andAuthorizationHeader.

Returns Ok(()) for success, Err(chilkat::Error) for failure.

More Information and Examples
top
GenNonce
pub fn gen_nonce(&self, num_bytes: i32) -> Result<()>
Introduced in version 9.5.0.55

Generates a random nonce num_bytes in length and sets the Nonce property to the hex encoded value.

Returns Ok(()) for success, Err(chilkat::Error) for failure.

top
GenTimestamp
pub fn gen_timestamp(&self) -> Result<()>
Introduced in version 9.5.0.55

Sets the Timestamp property to the current date/time.

Returns Ok(()) for success, Err(chilkat::Error) for failure.

top
RemoveParam
pub fn remove_param(&self, name: &str) -> Result<()>
Introduced in version 9.5.0.53

Removes a name/value parameter from the OAuth1 signature.

Returns Ok(()) for success, Err(chilkat::Error) for failure.

top
SetRsaKey
pub fn set_rsa_key(&self, priv_key: &PrivateKey) -> Result<()>
Introduced in version 9.5.0.64

Sets the RSA key to be used when the SignatureMethod is set to RSA-SHA1 or RSA-SHA2.

Returns Ok(()) for success, Err(chilkat::Error) for failure.

top