in src/main/java/com/twitter/joauth/Verifier.java [130:158]
private VerifierResult verifyOAuth1(
UnpackedRequest.OAuthRequest request,
String nonce,
long timestampSecs,
String tokenSecret,
String consumerSecret,
String signature,
String signatureMethod,
String normalizedRequest
) {
if (!validateTimestampSecs(timestampSecs)) {
if (log.isLoggable(Level.FINE)) {
log.log(Level.FINE, String.format("bad timestamp -> %s", request.toString()));
}
return VerifierResult.BAD_TIMESTAMP;
} else if (!validateNonce.validate(nonce)) {
if (log.isLoggable(Level.FINE)) {
log.log(Level.FINE, String.format("bad nonce -> %s", request.toString()));
}
return VerifierResult.BAD_NONCE;
} else if (!validateSignature(normalizedRequest, signature, signatureMethod, tokenSecret, consumerSecret)) {
if (log.isLoggable(Level.FINE)) {
log.log(Level.FINE, String.format("bad signature -> %s", request.toString()));
}
return VerifierResult.BAD_SIGNATURE;
} else {
return VerifierResult.OK;
}
}