NS OAuth 1.0a Token Based Auth

auth.ex

@oauth_creds [
    realm: "#{@acct_id}",
    oauth_consumer_key: "<CONSUMER_KEY>",
    oauth_consumer_secret: "<CONSUMER_SECRET>",
    oauth_token: "<TOKEN>",
    oauth_token_secret: "<TOKEN_SECRET>",
    oauth_signature_method: "HMAC-SHA256",
    oauth_version: "1.0"
  ]
  
  def forge_oauth_head(method, url, qs \\ []) do
    timestamp = DateTime.utc_now() |> DateTime.to_unix() |> Integer.to_string()
    seed = :crypto.strong_rand_bytes(16) |> Base.encode16()
    nonce = :crypto.hash(:md5, seed) |> Base.encode16(case: :lower) |> String.slice(0..12) 

    head =
      (@oauth_creds ++ [oauth_timestamp: timestamp, oauth_nonce: nonce])
      |> Enum.reject(fn {key, _} ->
        [:oauth_consumer_secret, :oauth_token_secret] |> Enum.member?(key)
      end)
      |> Enum.reduce([], fn {key, value}, acc ->
        acc ++ ["#{key}=\"#{value |> URI.encode_www_form()}\""]
      end)
      |> Enum.join(",")

    {"Authorization",
     "OAuth #{head}" <>
       ",oauth_signature=\"" <>
       forge_sign(method <> "&" <> (url |> URI.encode_www_form()), timestamp, nonce, qs) <> "\""}
  end

  def forge_sign(head, timestamp, nonce, qs) do
    params =
      (@oauth_creds ++ [oauth_timestamp: timestamp, oauth_nonce: nonce] ++ qs)
      |> Enum.reject(fn {key, _} ->
        [:realm, :oauth_consumer_secret, :oauth_token_secret] |> Enum.member?(key)
      end)
      |> Enum.sort_by(fn {key, val} ->
        {key, val}
      end)
      |> Enum.reduce([], fn {key, value}, acc ->
        acc ++ ["#{key}=#{value |> URI.encode(&URI.char_unreserved?(&1))}"]
      end)
      |> Enum.join("&")
      |> URI.encode_www_form()

    key =
      (@oauth_creds |> Keyword.fetch!(:oauth_consumer_secret)) <>
        "&" <> (@oauth_creds |> Keyword.fetch!(:oauth_token_secret))

    :crypto.hmac(:sha256, key, head <> "&" <> params)
    |> Base.encode64(case: :lower)
    |> URI.encode_www_form()
  end
  

@tmepple Great! It was specifically design3d for NetSuite and with that being said I'm just going to fork this thing and add some additional control. As you have found it only supplies an auth header. NS Rest Web Service is based on OAS2 so it has a hypermedia spec. Understandung those will save you 5ime and alsways ask a question . I'm gonna fork to add the control we need to work with newer APIs that use TBA