Stumbled upon this while playing with Search API as service authenticated with OAuth.

If URL has a parameter in it in this form:

http://URL/?param[]=something

OAuth library will parse it as two parameter keys:

'param[]' => something
'param[0]' => something

Vectors in parameters are handled properly in OAuthUtil::parse_parameters() and duplicates are joined in an array, so brackets should be removed.

Patch attached in comments.

CommentFileSizeAuthor
#1 oauth-1557976-1_url_parameters_stripping.patch915 byteskotnik

Comments

kotnik’s picture

kotnik commented
Status: Active » Needs review
StatusFileSize
new oauth-1557976-1_url_parameters_stripping.patch915 bytes

Patch attached.

I am not sure this is the right approach, and this might be better to be applied in DrupalOAuthRequest. Comments are welcome.