Problem requesting temp access token(A-B).

[TimHaydnJones]

I'm having my first attempt at interfacing to the fitbit api from vb.net.

I have registered my app and got the necessary keys.

I have implemented the HMAC-SHA1 signature and both my base string and my signature match the example given in the API Debug tool - so far so good.

However, I'm getting a 400 Bad Request when I try to use request_token

This is my authorisatioh header, which seems to abide by the advice given

X-Authorization: OAuth realm="https://api.fitbit.com/oauth/request_token",oauth_callback=http%3A%2F%2Fwww.nonexistent.org,oauth_co...

Any obvious howlers? I'm sending this via a POST. Can I assume that I don't need a message body for a call to request_token?

Should I be wrapping my header value parameters in quotes (I think I tried it but you know how it is when you get stuck)

Any advice gratefully rxd.

Thanks

Tim

[TimHaydnJones · Accepted solution]

SOLVED:

One of those blindingly obvious things -  the X-Authorisation header shouldn't have had the X- prefix.

One of the consequences of using code from the internet, but it still brought me to the end game quicker than I would have got there on my own, so I guess it's just one of those things.

If I could have closed this post so I didn't waste anyone's time, I would have.