Oauth post parameters

[Tasso22]

I have a question about BaseProtectedResourceDetails setAdditionalParameters method as well as CoreOAuthConsumerSupport configureURLForProtectedAccess method. Both of these methods have an additional parameters argument.

My expectation would be that these parameters would be included in the body of the request. As it turns out they are only included in the header. I am doing a POST (not sure if that makes a difference as opposed to a get). If the intended purpose of these arguments in to only include in the header, is there an api, method call I am missing to attach post body data?

Thanks for your help with this.

[Tasso22]

Any thoughts on this? I could really use some help with it.

[Dave Syer]

I'm not really as familiar with the OAuth 1.0 spec. I thought that only query parameters were part of the signature? The additional parameters, I assume, are there for protocol extensions not for business data.