I request a user_timeline for experimental purposes. The format is RSS and I want to use the page parameter. Without authentication this runs easily. I can increase the page number and get what I want. With the OAuth stuff it gets weird.
How much of the requested address must be part of the signature base string? I read the base string is
HTTP_method & url_without_parameters & query_parameters
If I sign an URL without any parameters and then request exactly the same URL without parameters I get a valid result but only the first 20 messages. This is important. It means I have the keys and my algorithm to generate a valid signature with all the encoding stuff works (at least in this case ...)
If I now add a page parameter to the URL in the GET request (not in the signature) I get "401 (Unauthorized)". The same happens with all parameters, count, screen_name, user_id ... Why???
Do I have to put the page parameter elsewhere, not at the end of the requested URL??? What's wrong??? How do I get more than the 20 messages?
Replies
OK, by the time this is solved.