Server Side API (REST)

The OAuth.php file is located at: http://oauth.googlecode.com/<wbr/>svn/code/php/OAuth.php

<?php
require_once("OAuth.php");

// Signature calculation method
// The parameters for the signature calculation are:
//  1. Your secret key
//  2. The HTTP method ('GET' or 'POST') 
//  3. Method API name (e.g. 'setStatus')
//  4. The parameters of the API method. Note that each API method has a different set of parameter. 
function calcSignatureREST($secretKey, $httpMethod, $apiMethod, $parameters) {   
    $req = OAuthRequest::from_request($httpMethod,'http://socialize.api.gigya.com/socialize.'.$apiMethod, $parameters);
    $baseString = $req->get_signature_base_string();    
    return  base64_encode(hash_hmac('sha1', $baseString, base64_decode($secretKey), true));
}

// Your secret key (can be found at the bottom of the Site Setup page on the Gigya website)
$secretKey = 'ENTER YOUR SECRET KEY HERE';

// The parameters for the socialize.getUserInfo API call: 
$parameters = array(
    "apiKey" => '2_OitqVv1ZZClsxml9-2L8eWZ-9FTTnTIu6S2-3jdEau4YuabkX4ssNcROopwy_rNv',
    "nonce" => '128900583063345187',
    "timestamp" => '1245584706',
    "uid" => '_gid_+mtciUK98aqx57Dn+7yFhA==');

echo calcSignatureREST($secretKey, 'POST', 'getUserInfo', $parameters);

?>

class Post
  #@Shmueli:
  # I am using here the hmac/sha1 lib you can find here http://rubyforge.org/projects/ruby-hmac/
  # user, id, status_message are instance methods of the Post class.
  # this authentication method only works for the status api call as the http parameters are ordered 
  # hard coded and not sorted automatically.
  # some modifications may be needed for other API calls.
  def authenticate_and_share
    #@ escape the status message and replace all + with %20 as spaces are CGI.escaped to +
    message_text = CGI.escape(status_message).gsub('+', '%20')
    user_id = user.id
  
    #@ here are the parameters you need to supply from your Gigya site's settings page.
    api_url = "http://socialize.api.gigya.com/socialize.setStatus"
    api_key = "HERE_GOES_YOUR_API_KEY"
    gigya_secret_key = "HERE_GOES_YOUR_GIGYA_SECRET_KEY"
  
    #@ decode secret key and prepare nonce.
    gigya_secret = Base64.decode64(gigya_secret_key)
    timestamp = Time.now.gmtime.to_i
    nonce = "#{user_id}#{id}#{timestamp}"
    http_method = "GET" #@shmu: define your HTTP method

    #@ parameters are ordered alphabetically, base string include HTTP method call and its parameters, 
    # all separated with unescaped "&"
    parameters = CGI.escape("apiKey=#{CGI.escape(api_key)}&nonce=#{CGI.escape(nonce)}&status=#{message_text}
    &timestamp=#{timestamp}&uid=#{user_id}")
    base_string = "#{http_method}&#{CGI.escape(api_url)}&#{parameters}"
  
    #@ hmac/sha1 encription for the gigya secret and the base_string
    hmacsha1 = HMAC::SHA1.digest(gigya_secret, base_string)
    gigya_sign = Base64.encode64(hmacsha1).chomp.gsub(/\n/,'')
    gigya_sign = CGI.escape(gigya_sign) #@shmu: we must escape the signature as well.
  
    #@ finalized api request url with the signed signature
    request_url = "#{api_url}?apiKey=#{api_key}&nonce=#{nonce}&status=#{message_text}&timestamp=#{timestamp}
    &uid=#{user_id}&sig=#{gigya_sign}"
    puts request_url.inspect
  
    #@ read the response
    response_text = open(request_url).read
 
    #@ handle error messages from gigya XML output.
    regexp = /\<statusCode\>(.*?)\<\/statusCode\>/
    status_code = response_text.scan(regexp).to_s.to_i
    if status_code == 200
      okmsg = "Gigya: Content Shared: #{status_message} [#{user.nick}]"
      logger.info okmsg
      return okmsg
    else
      raise "GIGYA RESPONSE ERROR: #{response_text.scan(/\<errorMessage\>(.*?)\<\/errorMessage\>/).to_s} \n\n 
        #{response_text.inspect} \n\n\n [id:#{id}, user:#{user}]\n\nStatusMessage: #{status_message}\n\n Basestring:
        #{base_string}\n\n RequestURL: #{request_url}\n\n\n"
    end
  end
end

@The Ruby example code is written by Shmueli Ahdut.

The following code example is a Perl script that executes the socialize.getUserInfo API call: 

#!/usr/local/bin/perl

use Digest::HMAC_SHA1 qw(hmac_sha1);
use MIME::Base64;
use URI::Escape;

my $secretKey = "[ENTER YOUR SECRET KEY HERE]";
my $apikey = "[ENTER YOUR API KEY HERE]";
my $uid = "[ENTER THE UID FOR A CONNECTED USER HERE]";

my $key = MIME::Base64::decode ($secretKey);

my $time = time ();
my $nonce = $time;

my $url = "http://socialize.api.gigya.com/socialize.getUserInfo";
my $method = "GET";

my $parms = "apiKey=" . $apikey;
$parms .= "&nonce=" . $nonce;
$parms .= "&timestamp=" . $time;
$parms .= "&uid=" . uri_escape_utf8 ($uid);

my $sigbase = $method . "&" . uri_escape_utf8 ($url) . "&" . uri_escape_utf8 ($parms);

print STDERR "Base String: " . $sigbase . "\n\n";
my $hashed = hmac_sha1 ($sigbase, $key);
my $sig = MIME::Base64::encode ($hashed);
$sig =~ s/\n$//;

print STDERR "Sig: $sig\n";


my $url = "http://socialize.api.gigya.com/socialize.getUserInfo?apiKey=" . uri_escape ($apikey) . "&nonce=" . $time . "&sig=" . uri_escape ($sig) . 
            "&timestamp=" . $time . "&uid=" . uri_escape ($uid);

print STDERR "URL: " . $url . "\n";