Understanding oAuth with Perl

Gangabass has asked for the wisdom of the Perl Monks concerning the following question:

Hi, i have a problem making simple API request to the Yammer (https://www.yammer.com/api_doc.html). I need to get https://www.yammer.com/api/v1/groups.xml (Groups: A list of groups). I'm trying to use Net::OAuth::Simple. Here is my Yammer.pm:

package Yammer;
use strict;
use base qw(Net::OAuth::Simple);
sub new {
    my $class  = shift;
    my %tokens = @_;
    return $class->SUPER::new( tokens => \%tokens, 
        urls   => {
             authorization_url => "https://www.yammer.com/oauth/author
+ize",
             request_token_url => "https://www.yammer.com/oauth/reques
+t_token",
             access_token_url  => "https://www.yammer.com/oauth/access
+_token",
        },
        protocol_version => '1.0a',
    );
}
sub view_restricted_resource {

    my $self = shift;
    my $url  = shift;
    return $self->make_restricted_request( $url, 'GET' );
}
sub update_restricted_resource {

    my $self         = shift;
    my $url          = shift;
    my %extra_params = @_;
    return $self->make_restricted_request($url, 'POST', %extra_params)
+;    
}

1;
[download]

And here is my main program:

use Yammer;

# Get the tokens from the command line, a config file or wherever 
my %tokens  = (

    consumer_key => 'Baj7MciMhmnDTwj6kaOV5g',
    consumer_secret => 'ejFlGBPtXwGJrxrEnwGvdRyokov1ncN1XxjmIm34M',
    callback => 'https://www.yammer.com/oauth/authorize',

); 
my $app     = Yammer->new(%tokens);
# Check to see we have a consumer key and secret
unless ($app->consumer_key && $app->consumer_secret) {
    die "You must go get a consumer key and secret from App\n";
} 

# If the app is authorized (i.e has an access token and secret)
# Then look at a restricted resourse
if ($app->authorized) {
    my $response = $app->view_restricted_resource;
    print $response->content."\n";
    exit;
}
# Otherwise the user needs to go get an access token and secret
print "Go to " . $app->get_authorization_url( callback => 'https://www
+.yammer.com/oauth/authorize?rand=' . rand() ) . "\n";
print "Then hit return after\n";
<STDIN>;
my ($access_token, $access_token_secret) = $app->request_access_token(
+$_);
[download]

I'm getting messages like Go to https://www.yammer.com/oauth/authorize?oauth_token=2sxBkKW1F1iebF2TT5Y7g&callback=https%3A%2F%2Fwww.yammer.com%2Foauth%2Fauthorize%3Frand%3D0.0045166015625 And authorizing application on this URL. After that i see message like: You have successfully authorized the following application: 2GIS_yammer To complete the authorization go back to the 2GIS_yammer application and enter the following code: 869A But what next? Where i must enter this number? How to perform request i need? Thanks. Roman

Comment on Understanding oAuth with Perl Select or Download Code

Replies are listed 'Best First'.
Re: Understanding oAuth with Perl by Anonymous Monk on Mar 09, 2011 at 13:15 UTC
See https://www.yammer.com/api_oauth.html step 6 Basically, first time you run your app (perl program), it tells the user to start a browser and get some codes Then the user runs the program again, but time provides the program with the codes he obtained (the program could keep running, waiting for the user, you write that part) Net::OAuth::Simple tells you to see http://search.cpan.org/dist/Net-FireEagle/bin/fireeagle for a more complete example, also examples	[reply]
Re^2: Understanding oAuth with Perl by Gangabass (Vicar) on Mar 09, 2011 at 18:05 UTC
Thank you for the reply. Now i have no problems with GET request but can't complete POSTs. `if ($app->authorized) { my $response = $app->view_restricted_resource('https://www.yammer. +com/api/v1/users.xml' ); print $response->content."\n"; $response = $app->update_restricted_resource("https://www.yammer.c +om/api/v1/messages/", body => "Message body", broadcast => "true" ); print $response->content."\n"; exit; }` [download] I'll get error "POST on Net::OAuth::ProtectedResourceRequest=HASH(0x5590e74) failed: 302 Found". Can you explain why?	[reply] [d/l]
Re^3: Understanding oAuth with Perl by Anonymous Monk on Mar 10, 2011 at 12:56 UTC
I see in http://cpansearch.perl.org/src/SIMONW/Net-OAuth-Simple-1.5/lib/Net/OAuth/Simple.pm `return $self->_error("$method on $request failed: ".$response->sta +tus_line) unless ( $response->is_success );` [download] 3xx is not a 2xx, so is_success of HTTP::Status fails. According to http://en.wikipedia.org/wiki/HTTP_302/http://en.wikipedia.org/wiki/HTTP_303, 303 is the appropriate response for a successful post, but most apps still use 302 erroneously So, barring an actual error (follow the redirect), Net::Oauth::Simple needs a patch, yammer needs a patch	[reply] [d/l]
Re^4: Understanding oAuth with Perl by Anonymous Monk on Mar 10, 2011 at 13:25 UTC
Re^3: Understanding oAuth with Perl by Anonymous Monk on Jun 25, 2012 at 23:37 UTC
I got 401 Unauthorized response when I do POST. I have no issue with GET. Did you figure out your issue?	[reply]

Back to Seekers of Perl Wisdom