OAuth for Spring Security

Thanks, we'll take a look.

fixed in 3.13 snapshot. a release will be cut soon.

411 - Length required persists.

I do not see the additional parameters being added to the HTTP Post. I am adding additional parameters to the ProtectedResourceDetails. However, they do not appear on the POST command. Should they appear? Or Am I missing something? Or is this a bug in the oauth code?

Here is the printout of the post. Notice that the parameters "xoauth_displayname" and "scopoe" are not found.

POST /accounts/OAuthGetRequestToken HTTP/1.1
Authorization: OAuth
oauth_consumer_key="www.ezlista.com",
oauth_signature_method="HMAC-SHA1",
oauth_signature="9gRMn2qyae1JYFZb6aErDlp043M%3D",
oauth_timestamp="1268101028",
oauth_nonce="06d51c32-19bb-4786-b5dd-84a7ce75e711",
oauth_version="1.0",
oauth_callback="http%3A%2F%2Fezlista.com%2Fsecure%2Fcontacts%2FgoogleContactsImport.do"
Content-Type: application/x-www-form-urlencoded
User-Agent: Java/1.6.0_13
Host: www.google.com
Accept: text/html, image/gif, image/jpeg, ; q=.2, */; q=.2
Connection: keep-alive

....
details = new BaseProtectedResourceDetails();
....
Map<String,String> additionalParameters = new HashMap<String, String>();
additionalParameters.put("oauth_signature", ApplicationProperty.getInstance().getGoogleOAuthConsumerSecret());

additionalParameters.put("oauth_callback", ApplicationProperty.getInstance().getGoogleOAuthCallbackURL());

additionalParameters.put("xoauth_displayname", "EZLista.com");
additionalParameters.put("scope", ApplicationProperty.getInstance().getGoogleScope());

details.setAdditionalParameters(additionalParameters);

Fixed in 3.13.

Use GET (not POST). For some reason, Google requires a content-length header when using POST. I added a new test (TestGoogleOAuth) to verify the fix.

Closing for 3.13; feel free up open again as necessary.

I am using spring-security-oauth version 3.15 and I am still getting this error.
I actually enhanced the tonr sample app to talk to google. I want to list google contacts.

If forcing GET method solves the problem, how do I do it?
Here is my spring config snippet to add a google contacts resource:

<oauth:consumer resource-details-service-ref="resourceDetails" oauth-failure-page="/oauth_error.jsp">
<oauth:url pattern="/sparklr/**" resources="sparklrPhotos"/>
<oauth:url pattern="/contacts/**" resources="googleContacts"/>
</oauth:consumer>

<oauth:resource-details-service id="resourceDetails">
<oauth:resource id="sparklrPhotos"
key="tonr-consumer-key"
secret="SHHHHH!!!!!!!!!!"
request-token-url="http://localhost:8080/sparklr/oauth/request_token"
user-authorization-url="http://localhost:8080/sparklr/oauth/confirm_access"
access-token-url="http://localhost:8080/sparklr/oauth/access_token"/>
<oauth:resource id="googleContacts"
key="contacts-consumer-key"
secret="SHHHHH!!!!!!!!!!"
request-token-url="https://www.google.com/accounts/OAuthGetRequestToken?scope=http%3A%2F%2Fwww.google.com%2Fm8%2Ffeeds%2F"
user-authorization-url="https://www.google.com/accounts/OAuthAuthorizeToken"
access-token-url="https://google.com/accounts/OAuthGetAccessToken"/>
</oauth:resource-details-service>