We are trying to implement authentication as detailed on your developer pages:
The help text says: A user identifier, a timestamp, and a secret key (salt), shared between Hootsuite and the App Developer, are hashed together using SHA-512 and passed to the app. The verification hash can be recalculated by the App Developer and compared to the one passed in.
We are doing this in java, have used multiple libraries and although we are getting consistent results from those libraries, it is consistently not matching your token.
Have tried many combinations and libraries, for example in Commons codec: Crypt.crypt(t_uid + " . " + t_time, t_shared_secret).
Please can you provide more detail on exactly what needs to be hashed and what the salt should consists of. Please also specify explicitly whether it is returned raw or in hex and whether base64 encoding is used.
Please sign in to leave a comment.