“Failed to validate oauth signature and token” on Twitter Oauth – Check Your Clock!
I have been doing a bit of Twitter development for work in the last few months. Twitter is the first time I have worked with OAuth and it was a bit to wrap my head around. I wanted to tinker around doing some of my own apps since it seems pretty easy now. However, my first attempt at getting it going was a headache. Long story short, if you are unable to get your Request Token, check to make sure your system clock is accurate.
Using the same community libraries I used for work, I would consistently get a 401:Unauthorized – “Failed to validate oauth signature and token”. This seemed odd since my code is really only about 3 lines and the libraries do the rest and everything worked fine at work. Thus, I thought maybe it was my Python installation, but that was up today. Even the Twitter Dev team said that it was rare to have a Request Token fail.
I spent about 2 weeks tearing apart the libraries and checking every step of the process. I contacted the Twitter Dev team to see if my server was somehow blacklisted. Finally, yesterday via the The Twitter Development Google group, someone posted this message. The gist of it was that a 3rd party dev team was having issues getting the request token and traced it back to their server’s system time being 3 days off. So, I pinged my host guy. As it turns out, he didn’t have the time sync enabled in ubuntu and the clock was 2 hours off. As soon as he enabled sync, my code worked. Derf.
So yup, if you hit the unlikely case that your Request token doesn’t validate, check your system clock. Google Juice, help spread the word.
8 Responses 
Leave a Reply 
About Me
Blaine Garrett is a Minneapolis-based web designer, fine artists, and general jack of all trades. When he is not designing next-generation web applications or feverishly painting away, he dabbles in other creative endeavors as well as enjoying the fruits of the luscious Twin Cities.
Thanks for this post. I was also banging my head on this problem and a `ntpdate pool.ntp.org` did wonders!
Thanks
doh!
Thanks Blaine, I too was banging my head against a wall with this. The sample code is pretty simple so it just didn’t make sense.
thanks!
Joel
ha, so glad this article exists. could have wasted so many more days. google, can we get some more juice?
[...] I went back to Google and searched for this error. One of the first results was, “Failed to validate oauth signature and token” on Twitter Oauth – Check Your Clock! My first thought, “Ah [...]
I spend 2 days going over and over through my code trying to figure out what could possibly be the issue with my code. I then submitted multiple support requests to Twitter with either no response, immediately closed tickets, and lots of frustration.
Upon an extensive search, I found this post and had my problem fixed in less than 3 minutes.
Thank you so very much for posting this information.
[...] http://blainegarrett.com/2009/07/14/failed-to-validate-oauth-signature-and-token-on-twitter-oauth-ch... [...]
Saved my ass! Thanks.