关于Sina WeiBo API OAuth 验证(ios)

#import <CommonCrypto/CommonHMAC.h>
#import <CommonCrypto/CommonCryptor.h>
#import "Base64.h"

#define SINA_T_HOST

@"api.t.sina.com.cn"//api.t.sina.com.cn
#define SINA_WEIBO_APP_KEY @"YOUR APP KEY"
#define SECRET @"YOUR APP SECRET"
#define OAUTH_VERSION @"1.0"
#define OAUTH_SIGNATURE_METHOD @"HMAC-SHA1"

#pragma mark 获得时间戳
- (NSString *)_generateTimestamp
{
return [NSString stringWithFormat:@"%d", time(NULL)];
}

#pragma mark 获得随时字符串 // 这个可以获取随机数,不一定要用uuid的
- (NSString *)_generateNonce
{
CFUUIDRef theUUID = CFUUIDCreate(NULL);
CFStringRef string = CFUUIDCreateString(NULL, theUUID);
NSMakeCollectable(theUUID);
return (NSString *)string;
}
#pragma mark 获取request_token的参数
-(void) getRequestToken {
NSString *baseUrl = [NSString stringWithFormat:@"http://%@/oauth/request_token", SINA_T_HOST];
NSString *nonce = [self _generateNonce];
NSString *timestamp = [self _generateTimestamp];

NSMutableDictionary* info = [NSMutableDictionary dictionaryWithObjectsAndKeys:
SINA_WEIBO_APP_KEY,@"oauth_consumer_key",
OAUTH_SIGNATURE_METHOD,@"oauth_signature_method",
timestamp,@"oauth_timestamp",
nonce,@"oauth_nonce",
OAUTH_VERSION,@"oauth_version",nil];

[self hmac_sha1_signature:@"GET" url:baseUrl param:info token_secret:@""]; // 获取签名
////////////////////
NSString *oauthHeader = [NSString stringWithFormat:@"OAuth realm="%@", oauth_consumer_key="%@", oauth_signature_method="%@", oauth_signature="%@", oauth_timestamp="%@", oauth_nonce="%@", oauth_version="1.0"",
@"",
[info valueForKey:@"oauth_consumer_key"],
[info valueForKey:@"oauth_signature_method"],
[info valueForKey:@"oauth_signature"],
[info valueForKey:@"oauth_timestamp"],
[info valueForKey:@"oauth_nonce"]];
////////////////////
NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:baseUrl]];
[theRequest setHTTPMethod:@"GET"];
[theRequest setValue:oauthHeader forHTTPHeaderField:@"Authorization"];
self.connect = [[NSURLConnection alloc] initWithRequest:theRequest delegate:self]; // 开始连接 返回值在
}

// 获取request_token之后，要做一件事情，就是让用户登录，调出新浪微博登录页面：
- (NSString*)authorizeUrl{
//
NSString *baseUrl = [NSString stringWithFormat:@"http://%@/oauth/authorize", SINA_T_HOST];
NSString *url = [NSString stringWithFormat:@"%@?oauth_token=%@&oauth_token_secret=%@&oauth_callback=%@", baseUrl, self.oauth_token, self.oauth_token_secret, @"oob"];
return url;
}


///////////////
#pragma mark webView几个delegate
- (BOOL)webView:(UIWebView *)webView shouldStartLoadWithRequest:(NSURLRequest *)request navigationType:(UIWebViewNavigationType)navigationType{
return YES;
}
- (void)webViewDidFinishLoad:(UIWebView *)webView {
NSString *pin = [self locateAuthPinInWebView:webView]; // 获取pin码
if ([pin length]> 0) {
[self getAccessToken];
}
}
- (void)webViewDidStartLoad:(UIWebView *)webView {
}
- (void)webView:(UIWebView *)webView didFailLoadWithError:(NSError *)error {
}

#pragma mark 获取oauth_verifier授权码
- (NSString *) locateAuthPinInWebView:(UIWebView *)webView {
NSString *html = [webView stringByEvaluatingJavaScriptFromString: @"document.body.innerText"];
if ([html hasPrefix:@"获取到的授权码:"]) {
NSRange verifierRange=[html rangeOfString:@"获取到的授权码:"];
NSRange verifierRanges=NSMakeRange(verifierRange.location+verifierRange.length, 6);
NSString *verifer=[html substringWithRange:verifierRanges];
NSLog(@"%@",verifer);
self.oauth_verifier=verifer;
}
if (self.oauth_verifier.length > 0) return self.oauth_verifier;
if (html.length == 0) return nil;

const char *rawHTML = (const char *) [html UTF8String];
int length = strlen(rawHTML), chunkLength = 0;

for (int i = 0; i < length; i++) {
if (rawHTML[i] < '0' || rawHTML[i] > '9') {
if (chunkLength == 6) {
char *buffer = (char *) malloc(chunkLength + 1);

memmove(buffer, &rawHTML[i - chunkLength], chunkLength);
buffer[chunkLength] = 0;

self.oauth_verifier = [NSString stringWithUTF8String: buffer];
free(buffer);
return self.oauth_verifier;
}
chunkLength = 0;
} else
chunkLength++;
}
return nil;
}
#pragma mark 获取Access Token
- (void) getAccessToken {
NSString *baseUrl = [NSString stringWithFormat:@"http://%@/oauth/access_token", SINA_T_HOST];
NSString *nonce = [self _generateNonce];
NSString *timestamp = [self _generateTimestamp];

NSMutableDictionary* info = [NSMutableDictionary dictionaryWithObjectsAndKeys:SINA_WEIBO_APP_KEY,@"oauth_consumer_key",
OAUTH_SIGNATURE_METHOD,@"oauth_signature_method",
timestamp,@"oauth_timestamp",
nonce,@"oauth_nonce",
self.oauth_token,@"oauth_token",
self.oauth_verifier,@"oauth_verifier",
OAUTH_VERSION,@"oauth_version",nil];
[self hmac_sha1_signature:@"GET" url:baseUrl param:info token_secret:self.oauth_token_secret];

NSString *oauthHeader = [NSString stringWithFormat:@"OAuth realm="%@", oauth_consumer_key="%@", oauth_token="%@", oauth_signature_method="%@", oauth_signature="%@", oauth_timestamp="%@",oauth_verifier="%@", oauth_nonce="%@", oauth_version="1.0"",
@"",
[info valueForKey:@"oauth_consumer_key"],
[info valueForKey:@"oauth_token"],
[info valueForKey:@"oauth_signature_method"],
[info valueForKey:@"oauth_signature"],
[info valueForKey:@"oauth_timestamp"],
[info valueForKey:@"oauth_verifier"], //授权码
[info valueForKey:@"oauth_nonce"]];

NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:baseUrl]];
[theRequest setHTTPMethod:@"GET"];
[theRequest setValue:oauthHeader forHTTPHeaderField:@"Authorization"];
self.connect = [[NSURLConnection alloc] initWithRequest:theRequest delegate:self];
}
－－－－－－－－－－－－－－－－－－－－－－NSURLConnectionDelegate－－－－－－－－－－－－－－－－－－－
#pragma mark
#pragma mark NSURLConnectionDelegate
- (void)connection:(NSURLConnection *)aConnection didReceiveResponse:(NSURLResponse *)aResponse
{
NSHTTPURLResponse *resp = (NSHTTPURLResponse*)aResponse;
if (resp) {
NSLog(@"Response: %d", resp.statusCode); // 返回编号
}
}
- (void)connection:(NSURLConnection *)aConn didReceiveData:(NSData *)data
{
NSString *stringData = [[NSString alloc] initWithData: data encoding: NSUTF8StringEncoding];
NSLog(@"String Data %@",stringData); // 返回信息
// 这个stringdata要截取oauth_token，oauth_token_secret
//
}
- (void)connection:(NSURLConnection *)aConn didFailWithError:(NSError *)error
{
[UIApplication sharedApplication].networkActivityIndicatorVisible = NO;

NSString* msg = [NSString stringWithFormat:@"Error: %@ %@",[error localizedDescription],[[error userInfo] objectForKey:NSErrorFailingURLStringKey]];
NSLog(@"Connection failed: %@", msg); // 错误信息

}

-----------------------------------------生成签名--------------------------------
// 生成签名
-(void) hmac_sha1_signature:(NSString*) method url:(NSString*) baseUrl param:(NSDictionary*) param token_secret:(NSString*) token_secret{

NSArray *sortedkeys = [[param allKeys] sortedArrayUsingSelector:@selector(caseInsensitiveCompare:)];
NSMutableString *mutUrlParam = [NSMutableString stringWithString:@""];

unsigned i, c = [sortedkeys count];
for (i=0; i<c; i++) {
NSString *k=[sortedkeys objectAtIndex:i];
NSString *v=[param objectForKey:k];
if(i>0){
[mutUrlParam appendString:@"&"];
}
[mutUrlParam appendString:k];
[mutUrlParam appendString:@"="];
[mutUrlParam appendString:[self ab_RFC3986EncodedString:v]];// URI 编码
}

NSString *urlEncodeBaseUrl = [self ab_RFC3986EncodedString:baseUrl]; // URI 编码
NSString *urlParam = (NSString*)mutUrlParam;
urlParam = [self ab_RFC3986EncodedString:urlParam]; // URI 编码
NSString *sbs = [NSString stringWithFormat:@"%@&%@&%@", method, urlEncodeBaseUrl, urlParam];
NSString *key = [NSString stringWithFormat:@"%@&%@",SECRET, token_secret];
NSString *oauth_signature = [self hmac_sha1:key text:sbs];

[param setValue:oauth_signature forKey:@"oauth_signature"];

NSMutableString *urlParams = [NSMutableString stringWithString:@""];
NSArray *keys=[param allKeys];
i, c=[keys count];
for (i=0; i<c; i++) {
NSString *k=[keys objectAtIndex:i];
NSString *v=[param objectForKey:k];
NSString *paramStr = [NSString stringWithFormat:@"&%@=%@",k,[self ab_RFC3986EncodedString:v]];
[urlParams appendString:paramStr];
}

[urlParams replaceCharactersInRange:NSMakeRange(0,1) withString:@""];
}


- (NSString *)hmac_sha1:(NSString *)key text:(NSString *)text{

const char *cKey = [key cStringUsingEncoding:NSUTF8StringEncoding];
const char *cData = [text cStringUsingEncoding:NSUTF8StringEncoding];

char cHMAC[CC_SHA1_DIGEST_LENGTH];

CCHmac(kCCHmacAlgSHA1, cKey, strlen(cKey), cData, strlen(cData), cHMAC);

NSData *HMAC = [[NSData alloc] initWithBytes:cHMAC length:CC_SHA1_DIGEST_LENGTH];
NSString *hash = [Base64 encode:HMAC];//base64 编码。
[HMAC release];
return hash;
}

- (NSString *)ab_RFC3986EncodedString:(NSString *)v // UTF-8 encodes prior to URL encoding
{
NSMutableString *result = [NSMutableString string];
const char *p = [v UTF8String];
unsigned char c;

for(; c = *p; p++)
{
switch(c)
{
case '0' ... '9':
case 'A' ... 'Z':
case 'a' ... 'z':
case '.':
case '-':
case '~':
case '_':
[result appendFormat:@"%c", c];
break;
default:
[result appendFormat:@"%%X", c];
}
}
return result;
}



－－－－－－－－－－－－－－－－－－－－－－－－－－我的问题－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
#pragma mark SendWeiBo

// 这个东西呢，我一直返回的信息是错误的。有时是少个appkey。有时候是验证失败。
// 如果有高人的话，麻烦帮我解答下。
-(IBAction) send {
NSString *message = [m_textField text]; // 获取发送的文本内容
if ([message length] > 0) {
self.oauthType = 3;
NSString *baseUrl = [NSString stringWithFormat:@"http://%@/statuses/update.xml", SINA_T_HOST];
NSString *nonce = [self _generateNonce];
NSString *timestamp = [self _generateTimestamp];
NSString *status = message;
NSMutableDictionary* info = [NSMutableDictionary dictionaryWithObjectsAndKeys:
SINA_WEIBO_APP_KEY,@"oauth_consumer_key",
nonce,@"oauth_nonce",
OAUTH_SIGNATURE_METHOD,@"oauth_signature_method",
timestamp,@"oauth_timestamp",
self.oauth_token,@"oauth_token",
self.oauth_verifier,@"oauth_verifier",
OAUTH_VERSION,@"oauth_version",
SINA_WEIBO_APP_KEY,@"source",
status,@"status",
nil];

[self hmac_sha1_signature:@"POST" url:baseUrl param:info token_secret:self.oauth_token_secret];

NSString *oauthHeader = [NSString stringWithFormat:@"OAuth realm="%@", oauth_consumer_key="%@", oauth_token="%@", oauth_signature_method="%@", oauth_signature="%@", oauth_timestamp="%@", oauth_nonce="%@", oauth_version="1.0", source="%@" ",
@"",
[info valueForKey:@"oauth_consumer_key"],
[info valueForKey:@"oauth_token"],
[info valueForKey:@"oauth_signature_method"],
[info valueForKey:@"oauth_signature"],
[info valueForKey:@"oauth_timestamp"],
[info valueForKey:@"oauth_nonce"],
[info valueForKey:@"source"],
[info valueForKey:@"status"]
];//,status="%@"

NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:baseUrl]];
[theRequest setHTTPMethod:@"POST"];
[theRequest setHTTPShouldHandleCookies:NO];
[theRequest setValue:@"application/x-www-form-urlencoded" forHTTPHeaderField:@"Content-Type"];
int contentLength = [oauthHeader lengthOfBytesUsingEncoding:NSUTF8StringEncoding];
[theRequest setValue:[NSString stringWithFormat:@"%d", contentLength] forHTTPHeaderField:@"Content-Length"];
[theRequest setHTTPBody:[oauthHeader dataUsingEncoding:NSUTF8StringEncoding]];
self.connect = [[NSURLConnection alloc] initWithRequest:theRequest delegate:self];
}
}