idangazit/oauthlib — pull request #20 by calebbrown (2012-04-18 14:25:11+00:00)
Title: Bug fixes for the OAuth 1.0 Client and Server

I've gone through the Server and Client in the OAuth 1.0a implementation and fixed a collection of bugs and improved support for RFC 5849.

Here is a brief overview of what I've changed:

* Fix a collection of broken variables and constants
* Fixed a bug where the server was getting the signature from params when it should've been getting the signature method.
* Removed the invalid 'safe' parameter from `urllib.unquote()`
* Fix a broken condition in `signature.collect_parameters()` which was comparing against the value instead of the key.
* Fix a bug where the Server wasn't passing through the http_method to the client when generating the signature.
* Changed `parameters.prepare_headers()` so that it doesn't use unicode strings after they've been passed through `utils.escape()`
* Fixed a bug where the client was dropping all the headers except the `Authorization` header when signing a request.
* Added support for only including the body in the signature's base string when the Content-Type is set to `application/x-www-form-urlencoded`. This brings it inline with the RFC and stops multipart requests failing.
* Fixed a bug where HMAC SHA1 signatures were breaking when either secret was `None`