On the following API documentation page
https://wiki.fitbit.com/display/API/OAuth+Authentication+in+the+Fitbit+API
an example shows the Authorization Header String. It's my understanding that this string needs to be in order for the SignatureBaseString.. but is show OUT of order in the example. Is the order not needed once you've properly generated the Signature?
Example
POST /oauth/request_token HTTP/1.1
Host: api.fitbit.com
Authorization: OAuth oauth_consumer_key="fitbit-example-client-application",
oauth_signature_method="HMAC-SHA1",
oauth_timestamp="1270248082",
oauth_nonce="161822064",
oauth_callback="http%3A%2F%2Fexample.fitbit.com%2Fapp%2FcompleteAuthorization",
oauth_signature="Omf%2Bls2gn%2BDlghq245LRIyfMdd8%3D"
oauth_version="1.0"
