1, 在第一步获取Request Token时，需要使用Consumer Key和API Key Secret进行签名 的Consumer Key Secret。
方法：oauth/request_token获取request_token之后，要做一件事情，就是让用户登录，调出新浪微博登录页面：- (NSString*)authorizeUrl{ // NSString *baseUrl = [NSString stringWithFormat:@"http://%@/oauth/authorize", SINA_T_HOST]; NSString *url = [NSString stringWithFormat:@"%@?oauth_token=%@&oauth_token_secret=%@&oauth_callback%@", baseUrl, self.oauth_token, self.oauth_token_secret, @"oob"]; return url;}oauth_token 和oauth_token_secret是第一步的请求返回的。登录完，用户授权后，会生成一个授权码，这个授权码在下一步获取access token的时候使用，就是下面的参数pin。2, 在第二步换取Access Token时，需要使用Consumer Key，API Key Secret、Request Token和Request Token Secret进行签名。而Request Token和Request Token Secret对应签名中的Token和Token Secret 方法：oauth/access_token举例：#define SINA_T_HOST @"api.t.sina.com.cn"//api.t.sina.com.cn#define SINA_WEIBO_APP_KEY @"你的Consumer Key"#define SECRET @"你的API Key Secret"#define OAUTH_VERSION @"1.0"#define OAUTH_SIGNATURE_METHOD @"HMAC-SHA1"获取Request Token- (BOOL)getRequestToken{ BOOL bRes = NO; self.uploadPool = [[NSAutoreleasePool alloc] init]; self.characterBuffer = [NSMutableData data]; done = NO; [[NSURLCache sharedURLCache] removeAllCachedResponses]; NSString *baseUrl = [NSString stringWithFormat:@"http://%@/oauth/request_token", SINA_T_HOST]; CFUUIDRef theUUID = CFUUIDCreate(NULL); CFStringRef string = CFUUIDCreateString(NULL, theUUID); CFRelease(theUUID); NSString *nonce = [(NSString*)string copy]; CFRelease(string); NSString * timestamp = [NSString stringWithFormat:@"%0.0f",[[NSDate date] timeIntervalSince1970]]; NSMutableDictionary* info = [NSMutableDictionary dictionaryWithObjectsAndKeys:SINA_WEIBO_APP_KEY,@"oauth_consumer_key", OAUTH_SIGNATURE_METHOD,@"oauth_signature_method", timestamp,@"oauth_timestamp", nonce,@"oauth_nonce", OAUTH_VERSION,@"oauth_version",nil]; NSString* url = hmac_sha1_signature(@"GET", baseUrl, info, @""); NSLog(@"%@", url); NSString *oauthHeader = [NSString stringWithFormat:@"OAuth realm=\"%@\", oauth_consumer_key=\"%@\", oauth_signature_method=\"%@\", oauth_signature=\"%@\", oauth_timestamp=\"%@\", oauth_nonce=\"%@\", oauth_version=\"1.0\"", @"", [info valueForKey:@"oauth_consumer_key"], [info valueForKey:@"oauth_signature_method"], [info valueForKey:@"oauth_signature"], [info valueForKey:@"oauth_timestamp"], [info valueForKey:@"oauth_nonce"]]; //NSLog(@"oauthHeader: %@", oauthHeader); NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:baseUrl]]; [theRequest setHTTPMethod:@"GET"]; [theRequest setValue:oauthHeader forHTTPHeaderField:@"Authorization"]; connection = [[NSURLConnection alloc] initWithRequest:theRequest delegate:self]; [self performSelectorOnMainThread:@selector(httpConnectStart) withObject:nil waitUntilDone:NO]; if (connection != nil) { do { [[NSRunLoop currentRunLoop] runMode:NSDefaultRunLoopMode beforeDate:[NSDate distantFuture]]; } while (!done); } NSString *stringData = [[NSString alloc] initWithData: characterBuffer encoding: NSUTF8StringEncoding]; NSLog(@"%@",stringData); //oauth_token=43dd8e6574fc1d1e1c5ae4ecf534b763&oauth_token_secret=015c39cad2c0bf264c8b46896f5d5f98 NSRange range = [stringData rangeOfString:@"oauth_token"]; NSRange rangeSecret = [stringData rangeOfString:@"oauth_token_secret"]; if(range.location != NSNotFound && rangeSecret.location != NSNotFound){ NSArray *sep = [stringData componentsSeparatedByString:@"&"]; if([sep count] >= 2){ NSArray *sep1 = [[sep objectAtIndex:0] componentsSeparatedByString:@"="]; if([sep1 count] >= 2){ self.oauth_token = [sep1 objectAtIndex:1]; bRes = YES; } NSArray *sep2 = [[sep objectAtIndex:1] componentsSeparatedByString:@"="]; if([sep2 count] >= 2){ self.oauth_token_secret = [sep2 objectAtIndex:1]; bRes = YES; } } } [stringData release]; if(bRes){ [self.tSinaInfo_ setObject:self.oauth_token forKey:@"oauth_token"]; [self.tSinaInfo_ setObject:self.oauth_token_secret forKey:@"oauth_token_secret"]; [self saveInformation]; } // Release resources used only in this thread. self.connection = nil; [uploadPool release]; self.uploadPool = nil; return bRes;}获取Access Token- (BOOL)getAccessToken{ BOOL bRes = NO; self.uploadPool = [[NSAutoreleasePool alloc] init]; self.characterBuffer = [NSMutableData data]; done = NO; [[NSURLCache sharedURLCache] removeAllCachedResponses]; NSString *baseUrl = [NSString stringWithFormat:@"http://%@/oauth/access_token", SINA_T_HOST]; CFUUIDRef theUUID = CFUUIDCreate(NULL); CFStringRef string = CFUUIDCreateString(NULL, theUUID); CFRelease(theUUID); NSString *nonce = [(NSString*)string copy]; CFRelease(string); NSString * timestamp = [NSString stringWithFormat:@"%0.0f",[[NSDate date] timeIntervalSince1970]]; NSMutableDictionary* info = [NSMutableDictionary dictionaryWithObjectsAndKeys:SINA_WEIBO_APP_KEY,@"oauth_consumer_key", OAUTH_SIGNATURE_METHOD,@"oauth_signature_method", timestamp,@"oauth_timestamp", nonce,@"oauth_nonce", self.oauth_token,@"oauth_token", self.pin,@"oauth_verifier", OAUTH_VERSION,@"oauth_version",nil]; hmac_sha1_signature(@"GET", baseUrl, info, self.oauth_token_secret); //NSLog(@"%@", url); NSString *oauthHeader = [NSString stringWithFormat:@"OAuth realm=\"%@\", oauth_consumer_key=\"%@\", oauth_token=\"%@\", oauth_signature_method=\"%@\", oauth_signature=\"%@\", oauth_timestamp=\"%@\",oauth_verifier=\"%@\", oauth_nonce=\"%@\", oauth_version=\"1.0\"", @"", [info valueForKey:@"oauth_consumer_key"], [info valueForKey:@"oauth_token"], [info valueForKey:@"oauth_signature_method"], [info valueForKey:@"oauth_signature"], [info valueForKey:@"oauth_timestamp"], [info valueForKey:@"oauth_verifier"], //授权码 [info valueForKey:@"oauth_nonce"]]; // NSLog(@"oauthHeader: %@", oauthHeader); NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:baseUrl]]; [theRequest setHTTPMethod:@"GET"]; [theRequest setValue:oauthHeader forHTTPHeaderField:@"Authorization"]; connection = [[NSURLConnection alloc] initWithRequest:theRequest delegate:self]; [self performSelectorOnMainThread:@selector(httpConnectStart) withObject:nil waitUntilDone:NO]; if (connection != nil) { do { [[NSRunLoop currentRunLoop] runMode:NSDefaultRunLoopMode beforeDate:[NSDate distantFuture]]; } while (!done); } NSString *stringData = [[NSString alloc] initWithData: characterBuffer encoding: NSUTF8StringEncoding]; //NSLog(@"%@",stringData); NSRange range = [stringData rangeOfString:@"oauth_token"]; NSRange rangeSecret = [stringData rangeOfString:@"oauth_token_secret"]; if(range.location != NSNotFound && rangeSecret.location != NSNotFound){ NSArray *sep = [stringData componentsSeparatedByString:@"&"]; if([sep count] >= 2){ NSArray *sep1 = [[sep objectAtIndex:0] componentsSeparatedByString:@"="]; if([sep1 count] >= 2){ self.access_token = [sep1 objectAtIndex:1]; bRes = YES; } NSArray *sep2 = [[sep objectAtIndex:1] componentsSeparatedByString:@"="]; if([sep2 count] >= 2){ self.access_token_secret = [sep2 objectAtIndex:1]; bRes = YES; } } } if(bRes){ [self.tSinaInfo_ setObject:self.access_token forKey:@"access_token"]; [self.tSinaInfo_ setObject:self.access_token_secret forKey:@"access_token_secret"]; [self saveInformation]; } [stringData release]; // Release resources used only in this thread. self.connection = nil; [uploadPool release]; self.uploadPool = nil; return bRes;}签名函数： hmac_sha1_signature NSString* hmac_sha1_signature(NSString* method, NSString* baseUrl, NSDictionary*param, NSString* token_secret) { NSArray *sortedkeys = [[param allKeys] sortedArrayUsingSelector:@selector(caseInsensitiveCompare:)]; NSMutableString *mutUrlParam = [NSMutableString stringWithString:@""]; unsigned i, c = [sortedkeys count]; for (i=0; i<c; i++) { NSString *k=[sortedkeys objectAtIndex:i]; NSString *v=[param objectForKey:k]; if(i>0){ [mutUrlParam appendString:@"&"]; } [mutUrlParam appendString:k]; [mutUrlParam appendString:@"="]; [mutUrlParam appendString:[URICode escapeURIComponent:v]];// URI 编码 } NSString *urlEncodeBaseUrl = [URICode escapeURIComponent:baseUrl]; // URI 编码 NSString *urlParam = (NSString*)mutUrlParam; urlParam = [URICode escapeURIComponent:urlParam]; // URI 编码 //1.generate Signature BaseString NSString *sbs = [NSString stringWithFormat:@"%@&%@&%@", method, urlEncodeBaseUrl, urlParam]; //NSLog(@"%@", sbs); NSString *key = [NSString stringWithFormat:@"%@&%@",SECRET, token_secret]; NSString *oauth_signature = [SHA1 hmac_sha1:key text:sbs]; [param setValue:oauth_signature forKey:@"oauth_signature"]; //oauth_signature = [URICode escapeURIComponent:oauth_signature]; //NSLog(@"oauth_signature = %@", oauth_signature); NSMutableString *urlParams = [NSMutableString stringWithString:@""]; NSArray *keys=[param allKeys]; i, c=[keys count]; for (i=0; i<c; i++) { NSString *k=[keys objectAtIndex:i]; NSString *v=[param objectForKey:k]; NSString *paramStr = [NSString stringWithFormat:@"&%@=%@",k,[URICode escapeURIComponent:v]]; [urlParams appendString:paramStr]; } [urlParams replaceCharactersInRange:NSMakeRange(0,1) withString:@""]; return (NSString*)urlParams;}