Missing required parameters OAuth API (netsuite)

Question

enter code hereI just started working with OAuth1 API's calling from php using GuzzleHttp\Client. In postman it's working fine.In netsuite log file I can see only required parameters is missing. I'm not understanding where I'm going wrong. whenever I'm calling the API I'm getting response as

 #message: """
    Client error: `GET https://7085372.suitetalk.api.netsuite.com/services/rest/record/v1/customer/` resulted in a `400 Bad Request` response:
    {"type":"https://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.1","title":"Bad Request","status":400,"o:errorD (truncated...)
    """
  #code: 400

php code

$realm = 'xxxxxxx';
$consumer_key = 'xxxxxxxxx';
$oauth_token = 'xxxxxxxxxxxxx';
$oauth_signature_method = 'HMAC-SHA256';
$oauth_version = '1.0';
$consumer_secret = 'xxxxxxxxxxxxx';
$token_secrect = 'xxxxxxxxxxxxx';
$timeStamp = Carbon::now()->timestamp;
$oauth_none = Str::random(11);

$base = 'GET' . "&" . urlencode('https://7085372.suitetalk.api.netsuite.com/services/rest/record/v1/customer/') . "&" . urlencode("oauth_consumer_key=" . urlencode($consumer_key) . "&oauth_nonce=" . urlencode($oauth_none) . "&oauth_signature_method=" . urlencode($oauth_signature_method) . "&oauth_timestamp=" . urlencode($timeStamp) . "&oauth_token=" . urlencode($oauth_token) . "&oauth_version=" . urlencode($oauth_version) . "&realm=" . urlencode($realm));

$key = urlencode($consumer_secret) . "&" . urlencode($token_secrect);
$oauth_signature = base64_encode(hash_hmac('sha256', $base, $key, true));



$authorization = 'OAuth oauth_consumer_key=' . $consumer_key . ',oauth_nonce=' . $oauth_none . ',oauth_signature_method=' . $oauth_signature_method . ',oauth_timestamp=' . $timeStamp . ',oauth_token=' . $oauth_token . ',oauth_version=' . $oauth_version . ',realm=' . $realm . ',oauth_signature=' . $oauth_signature . '';


        try {
            $client = new Client();
            $headers = [
                'Authorization' => $authorization,
                'Content-Type' => 'application/json',
                'Cookie' => 'NS_ROUTING_VERSION=LAGGING'
            ];
            $body = '';

            $request = new Request('GET', 'https://7085372.suitetalk.api.netsuite.com/services/rest/record/v1/customer/', $headers, $body);
            $res = $client->sendAsync($request)->wait();
            dd('here', $res, $res->getBody());
        } catch (RequestException $e) {
            dd($e->getResponse(), $e);
        }

Postman Collection

Answer 1

In this line:

$base = 'GET' . "&" . urlencode('https://7085372.suitetalk.api.netsuite.com/services/rest/record/v1/customer/') . "&" . urlencode("oauth_consumer_key=" . urlencode($consumer_key) . "&oauth_nonce=" . urlencode($oauth_none) . "&oauth_signature_method=" . urlencode($oauth_signature_method) . "&oauth_timestamp=" . urlencode($timeStamp) . "&oauth_token=" . urlencode($oauth_token) . "&oauth_version=" . urlencode($oauth_version) . "&realm=" . urlencode($realm));

From urlencode("oauth_consumer_key=" . to "&realm=" . urlencode($realm));, you are url_encoding twice, and you are url_encoding = symbols. So your $authorization string is absolutely malformed, and it results in missing parameters.

This can occurs when you write such a long line, and it's difficult to see. It's better to write it down this way:

$base = 'GET&' . urlencode('https://7085372.suitetalk.api.netsuite.com/services/rest/record/v1/customer/')
    . '&oauth_consumer_key=' . urlencode($consumer_key)
    . '&oauth_nonce=' . urlencode($oauth_none)
    . '&oauth_signature_method=' . urlencode($oauth_signature_method)
    . '&oauth_timestamp=' . urlencode($timeStamp)
    . '&oauth_token=' . urlencode($oauth_token)
    . '&oauth_version=' . urlencode($oauth_version)
    . '&realm=' . urlencode($realm);

But it's even better to use an array and http_build_query() function, this way:

$url = 'https://7085372.suitetalk.api.netsuite.com/services/rest/record/v1/customer/';

$data = array(
    'oauth_consumer_key' => $consumer_key,
    'oauth_nonce' => $oauth_none,
    'oauth_signature_method' => $oauth_signature_method,
    'oauth_timestamp' => $timeStamp,
    'oauth_token' => $oauth_token,
    'oauth_version' => $oauth_version,
    'realm' => $realm,
);

$base = 'GET&' . urlencode($url) . '&' . http_build_query($data);

Note.- Also, it's a good idea to use a variable for the url, since you are using it more than 1 time.

However, maybe there are more issues left. I'm not sure if you are are doing well the request.

And it's a good idea to have a function to generate OAuth signature.

Here you are a remaking of your code:

$url = 'https://7085372.suitetalk.api.netsuite.com/services/rest/record/v1/customer/';
$consumer_secret = 'xxxxxxxxxx';
$token_secret = 'xxxxxxxxxx';
$data = array(
    'oauth_consumer_key' => 'xxxxxxxxxx',
    'oauth_nonce' => Str::random(11),
    'oauth_signature_method' => 'HMAC-SHA256',
    'oauth_timestamp' => Carbon::now()->timestamp,
    'oauth_token' => 'xxxxxxxxxx',
    'oauth_version' => '1.0',
    'realm' => 'xxxxxxxxxx',
);

$oauth_signature = generateOauthSignature(
    'GET',
    $url,
    $data['oauth_consumer_key'],
    $data['oauth_nonce'],
    $data['oauth_signature_method'],
    $data['oauth_timestamp'],
    $data['outh_version'],
    $consumer_secret,
    $token_secret,
    $data['oauth_token'],
    array('realm' => $data['realm']),
);
$authorization = 'OAuth ';
foreach ($data as $key => $val) {
    $authorization .= ',' . $key . '=' . $val;
}
$authorization .= ',oauth_signature=' . $oauth_signature;

try {
    $client = new Client();
    $headers = [
        'Authorization' => $authorization,
        'Content-Type' => 'application/json',
        'Cookie' => 'NS_ROUTING_VERSION=LAGGING'
    ];
    $body = '';

    $request = new Request('GET', $url, $headers, $body);
    $res = $client->sendAsync($request)->wait();
    dd('here', $res, $res->getBody());
} catch (RequestException $e) {
    dd($e->getResponse(), $e);
}


function generateOauthSignature($method, $url, $consumerKey, $nonce, $signatureMethod, $timestamp, $version, $consumerSecret, $tokenSecret, $tokenValue, $extraParams = array())
{
    $base = strtoupper($method) . "&" . rawurlencode($url) . "&"
        . rawurlencode("oauth_consumer_key=" . $consumerKey
        . "&oauth_nonce=" . $nonce
        . "&oauth_signature_method=" . $signatureMethod
        . "&oauth_timestamp=" . $timestamp
        . "&oauth_token=" . $tokenValue
        . "&oauth_version=" . $version);

        if (!empty($extraParams)) {
            $base .= rawurlencode("&" . http_build_query($extraParams));
        }

    $key = rawurlencode($consumerSecret) . '&' . rawurlencode($tokenSecret);
    $signature = base64_encode(hash_hmac('sha1', $base, $key, true));

    return rawurlencode($signature);
}