Sat 4 Oct 2008
Sep 25th 2008, all requests started spoofing which utilized the .NET implementation of oAuth. It not only affected Orkut but all open social containers. So we started to find the problem as we can’t rely on others for the solution as it was affecting our application’s performance and all the data was insecure because we stopped checking the authenticity of the request.
Anyways, we started working on it and within 3 hours we had the solution. The problem was that Opensocial made some changes to their architecture and it started to send value in Token instead of Null and the which affected the base signature because it started adding the value from token to generate the signature. We have already submitted our solution to Google and you will soon find the code in Google Opensocial oAuth wiki page. But for now you can download the code from here:
http://www.xtremeheights.com/oAuth/oauth-net.zip
This is plug & play code. Just add the 2 CS files into your project and copy the code provided in text file in every page which you want to authenticate.
Please feel free to ask any questions you may have. We would be more than happy to help you.
If you don’t know anything about this then please have a look at on Orkut Developer’s forum here:
http://groups.google.com/group/opensocial-orkut/browse_thread/thread/c38fc11c6838f330
