spotify/crtauth-java — pull request #9 by noaresare (2014-09-26 17:58:00+00:00)
Title: Use proper HMAC-SHA1 for message authentication

* Test case to verify that the server secret indeed need to mach for
tokens to be valid.
* Previously message authentication was done concatenating secret
and payload feeding everything to SHA1, let's use HMAC-SHA1 as available
in javax.security instead, heeding the advice of gkreitz.