在PHP（共享服务器）中实现OAuth 1.0a及CodeIgniter 3适配的技术求助

Hey there! Let's break down how to get OAuth 1.0a 2-legged working for your API calls, and cover how to use it smoothly in CodeIgniter 3. First, let's align on what 2-legged OAuth actually means.

Understanding OAuth 1.0a 2-Legged Mode #

Unlike 3-legged OAuth (which involves user authorization flows), 2-legged is built for server-to-server communication. There’s no user approval step—you only use your consumer key and secret to sign every request the API receives, which proves your application’s identity to the service.

Fixing Your PHP Code #

Your existing code is a solid starting point, but there are a few key tweaks needed for 2-legged mode. Here’s a revised version with explanations:

<?php
$conskey = '<your-consumer-key>';
$conssec = '<your-consumer-secret>';
$api_url = '<target-api-endpoint-url>';

try {
    // Initialize OAuth for 2-legged: skip request token steps, use HEADER auth (most common standard)
    $oauth = new OAuth($conskey, $conssec, OAUTH_SIG_METHOD_HMACSHA1, OAUTH_AUTH_TYPE_HEADER);
    
    // Enable debug to inspect full request/response details (critical for troubleshooting)
    $oauth->enableDebug();
    
    // Prepare your payload (adjust fields to match the API's requirements)
    $data = new stdClass();
    $data->key1 = 'value1';
    $data->key2 = 'value2';
    
    // Set required headers for JSON payloads
    $headers = [
        'Content-Type' => 'application/json',
        'Accept' => 'application/json'
    ];
    
    // Send the POST request
    $ret = $oauth->fetch(
        $api_url,
        json_encode($data),
        OAUTH_HTTP_METHOD_POST,
        $headers
    );
    
    // Retrieve and display the API response (helpful for validating success)
    $response = $oauth->getLastResponse();
    $response_info = $oauth->getLastResponseInfo();
    
    echo "Status Code: " . $response_info['http_code'] . "\n";
    echo "Response: " . $response . "\n";
} catch (OAuthException $e) {
    // Catch and display OAuth-specific errors
    echo "OAuth Error: " . $e->getMessage() . "\n";
    echo "Debug Details: " . print_r($oauth->debugInfo, true) . "\n";
}
?>

Key fixes and notes:

• Switched OAUTH_AUTH_TYPE_AUTHORIZATION to OAUTH_AUTH_TYPE_HEADER: Most APIs expect OAuth credentials in the Authorization HTTP header (the authorization type is for query parameters, which is less common).
• Added code to retrieve and print the API response and debug info—this is your best tool for figuring out why a request fails.
• Wrapped everything in a proper OAuthException catch block to handle extension-specific errors gracefully.

Using OAuth 1.0a in CodeIgniter 3 #

Absolutely, you can use OAuth 1.0a in CodeIgniter 3. Here are two reliable approaches:

1. Use the Native PHP OAuth Extension (Recommended if Available) #

First, confirm your server has the PHP OAuth extension installed (check with phpinfo()). Then, create a reusable library:

1. Create application/libraries/Oauth2Legged.php:

<?php
defined('BASEPATH') OR exit('No direct script access allowed');

class Oauth2Legged {
    private $oauth;
    private $consumer_key;
    private $consumer_secret;

    public function __construct() {
        $this->CI =& get_instance();
        // Load keys from config (store these securely, not in code!)
        $this->consumer_key = $this->CI->config->item('oauth_consumer_key');
        $this->consumer_secret = $this->CI->config->item('oauth_consumer_secret');
        
        try {
            $this->oauth = new OAuth(
                $this->consumer_key,
                $this->consumer_secret,
                OAUTH_SIG_METHOD_HMACSHA1,
                OAUTH_AUTH_TYPE_HEADER
            );
            $this->oauth->enableDebug();
        } catch (OAuthException $e) {
            log_message('error', 'OAuth Initialization Failed: ' . $e->getMessage());
            show_error('Could not initialize OAuth connection');
        }
    }

    public function post($url, $data) {
        try {
            $headers = [
                'Content-Type' => 'application/json',
                'Accept' => 'application/json'
            ];
            $this->oauth->fetch($url, json_encode($data), OAUTH_HTTP_METHOD_POST, $headers);
            return [
                'response' => $this->oauth->getLastResponse(),
                'info' => $this->oauth->getLastResponseInfo()
            ];
        } catch (OAuthException $e) {
            log_message('error', 'OAuth POST Error: ' . $e->getMessage() . ' | Debug: ' . print_r($this->oauth->debugInfo, true));
            return ['error' => $e->getMessage(), 'debug' => $this->oauth->debugInfo];
        }
    }

    // Add GET, PUT, DELETE methods here as needed for your API
}
?>

2. Add your OAuth keys to application/config/config.php:

$config['oauth_consumer_key'] = '<your-consumer-key>';
$config['oauth_consumer_secret'] = '<your-consumer-secret>';

3. Use the library in a controller:

<?php
defined('BASEPATH') OR exit('No direct script access allowed');

class ApiSender extends CI_Controller {
    public function send_data() {
        $this->load->library('oauth2legged');
        
        $data = new stdClass();
        $data->key1 = 'value1';
        $data->key2 = 'value2';
        
        $result = $this->oauth2legged->post('<target-api-endpoint-url>', $data);
        
        if (isset($result['error'])) {
            // Handle error case
            echo "Request Failed: " . $result['error'];
            print_r($result['debug']);
        } else {
            // Process successful response
            echo "Status Code: " . $result['info']['http_code'];
            echo "<br>Response: " . $result['response'];
        }
    }
}
?>

2. Use a Pure PHP OAuth Library (If Extension Isn’t Available) #

If your server doesn’t support the OAuth extension, use a well-maintained pure PHP library that implements OAuth 1.0a. Add it to your CodeIgniter project (either as a custom library or in the application/third_party folder) and follow its documentation to set up 2-legged authentication.

Troubleshooting Tips #

• Signature Errors: Double-check your consumer key and secret—typos are the #1 cause. Also ensure the HTTP method (POST/GET/PUT) matches what the API expects, and all parameters are properly URL-encoded.
• Debug Mode: Lean on enableDebug() to inspect full request headers and responses. This will show you exactly what’s being sent to the API, which is invaluable for debugging.
• API Docs: Re-read the target API’s OAuth documentation—some services have specific requirements (like extra parameters or non-standard signature methods).

内容的提问来源于stack exchange，提问作者Enigma_20