关于Sina WeiBo API OAuth 验证(ios)

#import <CommonCrypto/CommonHMAC.h>
#import <CommonCrypto/CommonCryptor.h>
#import "Base64.h"

#define SINA_T_HOST 

                  @"api.t.sina.com.cn"//api.t.sina.com.cn
#define SINA_WEIBO_APP_KEY            @"YOUR APP KEY"
#define SECRET                        @"YOUR APP SECRET"
#define OAUTH_VERSION                 @"1.0"
#define OAUTH_SIGNATURE_METHOD        @"HMAC-SHA1"

#pragma mark 获得时间戳
- (NSString *)_generateTimestamp
{
    return [NSString stringWithFormat:@"%d", time(NULL)];
}

#pragma mark 获得随时字符串 // 这个可以获取随机数,不一定要用uuid的
- (NSString *)_generateNonce
{
    CFUUIDRef theUUID = CFUUIDCreate(NULL);
    CFStringRef string = CFUUIDCreateString(NULL, theUUID);
    NSMakeCollectable(theUUID);
    return (NSString *)string;
}
#pragma mark 获取request_token的参数
-(void) getRequestToken {
    NSString *baseUrl = [NSString stringWithFormat:@"http://%@/oauth/request_token", SINA_T_HOST];
    NSString *nonce = [self _generateNonce];
    NSString *timestamp = [self _generateTimestamp];
    
    NSMutableDictionary* info = [NSMutableDictionary dictionaryWithObjectsAndKeys:
                                 SINA_WEIBO_APP_KEY,@"oauth_consumer_key",
                                 OAUTH_SIGNATURE_METHOD,@"oauth_signature_method",
                                 timestamp,@"oauth_timestamp",
                                 nonce,@"oauth_nonce",
                                 OAUTH_VERSION,@"oauth_version",nil];
    
    [self hmac_sha1_signature:@"GET" url:baseUrl param:info token_secret:@""]; // 获取签名
    
    NSString *oauthHeader = [NSString stringWithFormat:@"OAuth realm="%@", oauth_consumer_key="%@", oauth_signature_method="%@", oauth_signature="%@", oauth_timestamp="%@", oauth_nonce="%@", oauth_version="1.0"",
                             @"",
                             [info valueForKey:@"oauth_consumer_key"],
                             [info valueForKey:@"oauth_signature_method"],
                             [info valueForKey:@"oauth_signature"],
                             [info valueForKey:@"oauth_timestamp"],
                             [info valueForKey:@"oauth_nonce"]];
    
    NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:baseUrl]];
    [theRequest setHTTPMethod:@"GET"];
    [theRequest setValue:oauthHeader forHTTPHeaderField:@"Authorization"];
    self.connect = [[NSURLConnection alloc] initWithRequest:theRequest delegate:self]; // 开始连接 返回值在
}

// 获取request_token之后，要做一件事情，就是让用户登录，调出新浪微博登录页面：
- (NSString*)authorizeUrl{
    //
    NSString *baseUrl = [NSString stringWithFormat:@"http://%@/oauth/authorize", SINA_T_HOST];
    NSString *url = [NSString stringWithFormat:@"%@?oauth_token=%@&oauth_token_secret=%@&oauth_callback=%@", baseUrl, self.oauth_token, self.oauth_token_secret, @"oob"];
    return url;
}


///
#pragma mark  webView几个delegate
- (BOOL)webView:(UIWebView *)webView shouldStartLoadWithRequest:(NSURLRequest *)request navigationType:(UIWebViewNavigationType)navigationType{
    return YES;
}
- (void)webViewDidFinishLoad:(UIWebView *)webView {
    NSString *pin = [self locateAuthPinInWebView:webView]; // 获取pin码
    if ([pin length]> 0) {
        [self getAccessToken];
    }
}
- (void)webViewDidStartLoad:(UIWebView *)webView {
}
- (void)webView:(UIWebView *)webView didFailLoadWithError:(NSError *)error {
}

#pragma mark 获取oauth_verifier授权码
- (NSString *) locateAuthPinInWebView:(UIWebView *)webView  {
    NSString            *html = [webView stringByEvaluatingJavaScriptFromString: @"document.body.innerText"];
    if ([html hasPrefix:@"获取到的授权码:"]) {
        NSRange verifierRange=[html rangeOfString:@"获取到的授权码:"];
        NSRange verifierRanges=NSMakeRange(verifierRange.location+verifierRange.length, 6);
        NSString *verifer=[html substringWithRange:verifierRanges];
        NSLog(@"%@",verifer);
    self.oauth_verifier=verifer;
    }
    if (self.oauth_verifier.length > 0) return self.oauth_verifier;
    if (html.length == 0) return nil;
    
    const char            *rawHTML = (const char *) [html UTF8String];
    int                    length = strlen(rawHTML), chunkLength = 0;
    
    for (int i = 0; i < length; i++) {
        if (rawHTML[i] < '0' || rawHTML[i] > '9') {
            if (chunkLength == 6) {
                char                *buffer = (char *) malloc(chunkLength + 1);
                
                memmove(buffer, &rawHTML[i - chunkLength], chunkLength);
                buffer[chunkLength] = 0;
                
                self.oauth_verifier = [NSString stringWithUTF8String: buffer];
                free(buffer);
                return self.oauth_verifier;
            }
            chunkLength = 0;
        } else
            chunkLength++;
    }
    return nil;
}
#pragma mark 获取Access Token
- (void) getAccessToken {
    NSString *baseUrl = [NSString stringWithFormat:@"http://%@/oauth/access_token", SINA_T_HOST];
    NSString *nonce = [self _generateNonce];
    NSString *timestamp = [self _generateTimestamp];
    
    NSMutableDictionary* info = [NSMutableDictionary dictionaryWithObjectsAndKeys:SINA_WEIBO_APP_KEY,@"oauth_consumer_key",
                                 OAUTH_SIGNATURE_METHOD,@"oauth_signature_method",
                                 timestamp,@"oauth_timestamp",
                                 nonce,@"oauth_nonce",
                                 self.oauth_token,@"oauth_token",
                                 self.oauth_verifier,@"oauth_verifier",
                                 OAUTH_VERSION,@"oauth_version",nil];
    [self hmac_sha1_signature:@"GET" url:baseUrl param:info token_secret:self.oauth_token_secret];
    
    NSString *oauthHeader = [NSString stringWithFormat:@"OAuth realm="%@", oauth_consumer_key="%@", oauth_token="%@", oauth_signature_method="%@", oauth_signature="%@", oauth_timestamp="%@",oauth_verifier="%@", oauth_nonce="%@", oauth_version="1.0"",
                             @"",
                             [info valueForKey:@"oauth_consumer_key"],
                             [info valueForKey:@"oauth_token"],
                             [info valueForKey:@"oauth_signature_method"],
                             [info valueForKey:@"oauth_signature"],
                             [info valueForKey:@"oauth_timestamp"],
                             [info valueForKey:@"oauth_verifier"], //授权码
                             [info valueForKey:@"oauth_nonce"]];
    
    NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:baseUrl]];
    [theRequest setHTTPMethod:@"GET"];
    [theRequest setValue:oauthHeader forHTTPHeaderField:@"Authorization"];
    self.connect = [[NSURLConnection alloc] initWithRequest:theRequest delegate:self];
}
－－－－－－－－－－－－－－－－－－－－－－NSURLConnectionDelegate－－－－－－－－－－－－－－－－－－－
#pragma mark
#pragma mark NSURLConnectionDelegate
- (void)connection:(NSURLConnection *)aConnection didReceiveResponse:(NSURLResponse *)aResponse
{
    NSHTTPURLResponse *resp = (NSHTTPURLResponse*)aResponse;
    if (resp) {
       NSLog(@"Response: %d", resp.statusCode); // 返回编号
    }
}
- (void)connection:(NSURLConnection *)aConn didReceiveData:(NSData *)data
{
    NSString *stringData = [[NSString alloc] initWithData: data encoding: NSUTF8StringEncoding];
    NSLog(@"String Data %@",stringData); // 返回信息
    // 这个stringdata要截取oauth_token，oauth_token_secret
    //
}
- (void)connection:(NSURLConnection *)aConn didFailWithError:(NSError *)error
{
    [UIApplication sharedApplication].networkActivityIndicatorVisible = NO;
    
    NSString* msg = [NSString stringWithFormat:@"Error: %@ %@",[error localizedDescription],[[error userInfo] objectForKey:NSErrorFailingURLStringKey]];
    NSLog(@"Connection failed: %@", msg); // 错误信息
    
}

-----------------------------------------生成签名--------------------------------
// 生成签名
-(void) hmac_sha1_signature:(NSString*) method url:(NSString*) baseUrl param:(NSDictionary*) param token_secret:(NSString*) token_secret{
    
    NSArray *sortedkeys = [[param allKeys] sortedArrayUsingSelector:@selector(caseInsensitiveCompare:)];
    NSMutableString *mutUrlParam = [NSMutableString stringWithString:@""];
    
    unsigned i, c = [sortedkeys count];
    for (i=0; i<c; i++) {
        NSString *k=[sortedkeys objectAtIndex:i];
        NSString *v=[param objectForKey:k];
        if(i>0){
            [mutUrlParam appendString:@"&"];
        }
        [mutUrlParam appendString:k];
        [mutUrlParam appendString:@"="];
        [mutUrlParam appendString:[self ab_RFC3986EncodedString:v]];// URI 编码
    }
    
    NSString *urlEncodeBaseUrl = [self ab_RFC3986EncodedString:baseUrl]; // URI 编码
    NSString *urlParam = (NSString*)mutUrlParam;
    urlParam = [self ab_RFC3986EncodedString:urlParam]; // URI 编码
    NSString *sbs = [NSString stringWithFormat:@"%@&%@&%@", method, urlEncodeBaseUrl, urlParam];
    NSString *key = [NSString stringWithFormat:@"%@&%@",SECRET, token_secret];
    NSString *oauth_signature = [self hmac_sha1:key text:sbs];
    
    [param setValue:oauth_signature forKey:@"oauth_signature"];
    
    NSMutableString *urlParams = [NSMutableString stringWithString:@""];
    NSArray *keys=[param allKeys];
    i, c=[keys count];
    for (i=0; i<c; i++) {
        NSString *k=[keys objectAtIndex:i];
        NSString *v=[param objectForKey:k];
        NSString *paramStr = [NSString stringWithFormat:@"&%@=%@",k,[self ab_RFC3986EncodedString:v]];
        [urlParams appendString:paramStr];
    }
    
    [urlParams replaceCharactersInRange:NSMakeRange(0,1) withString:@""];
}


- (NSString *)hmac_sha1:(NSString *)key text:(NSString *)text{
    
    const char *cKey  = [key cStringUsingEncoding:NSUTF8StringEncoding];
    const char *cData = [text cStringUsingEncoding:NSUTF8StringEncoding];
    
    char cHMAC[CC_SHA1_DIGEST_LENGTH];
    
    CCHmac(kCCHmacAlgSHA1, cKey, strlen(cKey), cData, strlen(cData), cHMAC);
    
    NSData *HMAC = [[NSData alloc] initWithBytes:cHMAC length:CC_SHA1_DIGEST_LENGTH];
    NSString *hash = [Base64 encode:HMAC];//base64 编码。
    [HMAC release];
    return hash;
}

- (NSString *)ab_RFC3986EncodedString:(NSString *)v // UTF-8 encodes prior to URL encoding
{
    NSMutableString *result = [NSMutableString string];
    const char *p = [v UTF8String];
    unsigned char c;
    
    for(; c = *p; p++)
    {
        switch(c)
        {
            case '0' ... '9':
            case 'A' ... 'Z':
            case 'a' ... 'z':
            case '.':
            case '-':
            case '~':
            case '_':
                [result appendFormat:@"%c", c];
                break;
            default:
                [result appendFormat:@"%%X", c];
        }
    }
    return result;
}



－－－－－－－－－－－－－－－－－－－－－－－－－－我的问题－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
#pragma mark SendWeiBo

// 这个东西呢，我一直返回的信息是错误的。有时是少个appkey。有时候是验证失败。
// 如果有高人的话，麻烦帮我解答下。
-(IBAction) send {
    NSString *message = [m_textField text]; // 获取发送的文本内容
    if ([message length] > 0) {
        self.oauthType = 3;
        NSString *baseUrl = [NSString stringWithFormat:@"http://%@/statuses/update.xml", SINA_T_HOST];
        NSString *nonce = [self _generateNonce];
        NSString *timestamp = [self _generateTimestamp];
        NSString *status = message;
        NSMutableDictionary* info = [NSMutableDictionary dictionaryWithObjectsAndKeys:
                                     SINA_WEIBO_APP_KEY,@"oauth_consumer_key",
                                     nonce,@"oauth_nonce",
                                     OAUTH_SIGNATURE_METHOD,@"oauth_signature_method",
                                     timestamp,@"oauth_timestamp",
                                     self.oauth_token,@"oauth_token",
                                     self.oauth_verifier,@"oauth_verifier",
                                     OAUTH_VERSION,@"oauth_version",
                                     SINA_WEIBO_APP_KEY,@"source",
                                     status,@"status",
                                     nil];
        
        [self hmac_sha1_signature:@"POST" url:baseUrl param:info token_secret:self.oauth_token_secret];
        
        NSString *oauthHeader = [NSString stringWithFormat:@"OAuth realm="%@", oauth_consumer_key="%@", oauth_token="%@", oauth_signature_method="%@", oauth_signature="%@", oauth_timestamp="%@", oauth_nonce="%@", oauth_version="1.0", source="%@" ",
                                 @"",
                                 [info valueForKey:@"oauth_consumer_key"],
                                 [info valueForKey:@"oauth_token"],
                                 [info valueForKey:@"oauth_signature_method"],
                                 [info valueForKey:@"oauth_signature"],
                                 [info valueForKey:@"oauth_timestamp"],
                                 [info valueForKey:@"oauth_nonce"],
                                 [info valueForKey:@"source"],
                                 [info valueForKey:@"status"]
                                 ];//,status="%@"

        NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:baseUrl]];
        [theRequest setHTTPMethod:@"POST"];
        [theRequest setHTTPShouldHandleCookies:NO];
        [theRequest setValue:@"application/x-www-form-urlencoded" forHTTPHeaderField:@"Content-Type"];
        int contentLength = [oauthHeader lengthOfBytesUsingEncoding:NSUTF8StringEncoding];
        [theRequest setValue:[NSString stringWithFormat:@"%d", contentLength] forHTTPHeaderField:@"Content-Length"];
        [theRequest setHTTPBody:[oauthHeader dataUsingEncoding:NSUTF8StringEncoding]];
        self.connect = [[NSURLConnection alloc] initWithRequest:theRequest delegate:self];
    }
}