Testing OAuth

This is an example of how to use a third party Auth client test tool to call to retrieve an access token pair from the CIX API.

Get a request token

Endpoint = http://api.cixonline.com/v1.0/cix.svc/getrequesttoken

Enter your consumerkey and secret

When you click the request token button the test app will return something like this.

request url: http://api.cixonline.com/v1.0/cix.svc/getrequesttoken?oauth_version=1.0&oauth_nonce=8b41990a5445d0ee836676f2aa901266&oauth_timestamp=1224760641&oauth_consumer_key=7300b3205d5549b48554e0ec372fec&oauth_signature_method=HMAC-SHA1&oauth_signature=oF1IIJJA8skncIHacyhBtDVVICA%3D
OAuthRequest Object
(
    [parameters:private] => Array
        (
            [oauth_version] => 1.0
            [oauth_nonce] => 8b41990a5445d0ee836676f2aa901266
            [oauth_timestamp] => 1224760641
            [oauth_consumer_key] => 7300b3205d5549b48554e0ec372fec
            [oauth_signature_method] => HMAC-SHA1
            [oauth_signature] => oF1IIJJA8skncIHacyhBtDVVICA=
        )
 
    [http_method:private] => GET
    [http_url:private] => http://api.cixonline.com/v1.0/cix.svc/getrequesttoken
    [base_string] => GET&http%3A%2F%2Fapi.cixonline.com%2Fv1.0%2Fcix.svc%2Fgetrequesttoken&oauth_consumer_key%3D7300b3205d5549b48554e0ec372fec%26oauth_nonce%3D8b41990a5445d0ee836676f2aa901266%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1224760641%26oauth_version%3D1.0
)

if you cut and paste that request token from the top of that result into a new browser window it will return a token pair that looks something like this :-

oauth_token=1a84d410c75a420e80253b3c979908&oauth_token_secret=a5fe04deb0a44d0186b405b314e0aa

take the values from this string and put them into the relevent fields on the test page, and change the endpoint to :-

http://forums.cixonline.com/secure/authapp.aspx

press authorise, this will cause the page to load a cix forums page (login if your not already logged in) this page asks you if you want to let this application have access as you. Click yes, to return to the test page.

Change the endpoint to :-

http://api.cixonline.com/v1.0/cix.svc/getaccesstoken

And press the “Access Token” button. Again this will return a token pair something like this :-

oauth_token=822f525b13654e2a9b704defce808b&oauth_token_secret=5acc59666eef4879afd9207b9398c2

This pair can now be saved by your application for as long as you like, and in conjunction with the consumer token pair will provide access for the auth'd user to use your application, until the token is invalidated.