Escape application/x-www-form-urlencoded payloads using the same method used when generating the OAuth signature, to ensure that they are in sync. Fixed #10.

Author: ekoleda

Service.gs

@@ -396,6 +396,17 @@ Service_.prototype.fetchInternal_ = function(url, params, opt_token,
     default:
       throw 'Unknown param location: ' + this.paramLocation_;
   }
+  if (params.payload && (!params.contentType ||
+      params.contentType == 'application/x-www-form-urlencoded')) {
+    // Disable UrlFetchApp escaping and use the signer's escaping instead.
+    // This will ensure that the escaping is consistent between the signature and the request.
+    var payload = request.data;
+    payload = Object.keys(payload).map(function(key) {
+      return signer.percentEncode(key) + '=' + signer.percentEncode(payload[key]);
+    }).join('&');
+    params.payload = payload;
+    params.escaping = false;
+  }
   return UrlFetchApp.fetch(url, params);
 };
 

samples/TripIt.gs

@@ -30,7 +30,7 @@ function reset() {
  * Configures the service.
  */
 function getService() {
-  return OAuth1.createService('Twitter')
+  return OAuth1.createService('TripIt')
       // Set the endpoint URLs.
       .setRequestTokenUrl('https://api.tripit.com/oauth/request_token')
       .setAuthorizationUrl('https://www.tripit.com/oauth/authorize')

samples/Twitter.gs

@@ -11,13 +11,9 @@ function run() {
     var payload = {
       status: 'It\'s a tweet!'
     };
-    payload = Object.keys(payload).map(function(key) {
-      return encodeRfc3986(key) + '=' + encodeRfc3986(payload[key]);
-    }).join('&');
     var response = service.fetch(url, {
       method: 'post',
-      payload: payload,
-      escaping: false
+      payload: payload
     });
     var result = JSON.parse(response.getContentText());
     Logger.log(JSON.stringify(result, null, 2));