title: Removing oauth_token from request header in Scribe
body: <p>We're trying to connect with another company's custom API which uses two-legged OAuth to authenticate a request and send us a response.</p>
  
  <p>At the moment the code we have is sending a request but it's not being authenticated at the other end and so sending a UNAUTHORISED response. </p>
  
  <p>The steps we have investigated so far:</p>
  
  <ul>
  <li>Connected to the remote site using an OAuth implementation in python using the <em>same credentials</em>.</li>
  <li>Asked the other company to compare our OAuth request with another that succeeds to see if there is a anything missing in ours.</li>
  </ul>
  
  <p>After the second point above, the only difference between our request and another working request is that the <code>oauth_token</code> parameter is present in our request and not in others. Furthermore, he said they have an <code>oauth_body_hash_value</code> in <em>most</em> of their requests but that's not present in ours - although they do get working requests without it.</p>
  
  <p>Is there a way to remove the <code>oauth_token</code> parameter in Scribe?  Alternatively, is the <code>oauth_body_hash_value</code> always needed?  Can a request work without?</p>
  
  <p>I've included the code below, I am completely new to OAuth so please feel free to tell me if there's something else that's wrong.</p>
  
  <p>Note that the TestAPI.class extends DefaultAPI10a and just returns "" for all three required methods.</p>
  
  <pre><code>public class TestImporter {
  
    private static final String REQ_URL   = "http://test.com/";
  
    private static final String KEY         = "KEY";
    private static final String SECRET      = "SECRET";
  
    // test variables
    private static final String VAR1        = "Test123";
  
    public static void main(String[] args) {
  
      OAuthService service = new ServiceBuilder()
                                 .provider(TestAPI.class)
                                 .apiKey(KEY)
                                 .apiSecret(SECRET)
                                 .build();
      Token token = new Token("", "");
      OAuthRequest request = new OAuthRequest(Verb.GET, REQ_URL + VAR1 + "/");
      service.signRequest(token, request);
      Response response = request.send();
      System.out.println(response.getBody());
  
    }
  
  }
  </code></pre>