Hi, as a beginner with Oauth I have a couple doubts:
- do we have to explicitly sign requests or is the client going to do it for us?
- if we manually sign them, and we have some data in the request, do we have to also include that in the signing "parameters"? What should the parameters be exactly?