Merge lp:~jamesh/account-polld/twitter-plugin into lp:~phablet-team/account-polld/trunk

[James Henstridge]

Add the Twitter polling plugin.

Add the Twitter plugin, producing notifications for mentions and direct messages. Both of these features work with the permissions provided by the token from the "twitter-microblog" service.

Incremental results are returned using the since_id API option.

OAuth 1.0a signing is done using the external github.com/garyburd/go-oauth/oauth library, since Twitter requires HMAC-SHA1 request signing, which is decidedly non-trivial (this is also the reason why there are 4 auth strings in the accounts.AuthData struct).

[Sergio Schvezov (sergiusens)]

On viernes 18 de julio de 2014 08h'49:24 ART, James Henstridge wrote:
> James Henstridge has proposed merging
> lp:~jamesh/account-polld/twitter-plugin into lp:account-polld.
>
> Commit message:
> Add the Twitter polling plugin.
>
> Requested reviews:
> Sergio Schvezov (sergiusens)
>
> For more details, see:
> https://code.launchpad.net/~jamesh/account-polld/twitter-plugin/+merge/227313

110 + // Resolve path relative to Graph API base URL, and add access token
this seems to be a stray comment.

250 + type user struct {
seems to be missing a gofmt/goimports call

97 + lastMentionId int64
98 + lastDirectMessageId int64
just out of curiosity, why are these int64 instead of uint64? Is there a
chance for negative Ids?

I'll do more thorough review in the morning.

[lp:~jamesh/account-polld/twitter-plugin]

14. By James Henstridge on 2014-07-21

Fix up comment, and run through gofmt.

[James Henstridge (jamesh)]

I've fixed the comment and run the code through gofmt.

The Twitter web site recommended using 64 bit integers. It didn't say one way or the other about signed/unsigned, and the two Go Twitter libraries linked from https://dev.twitter.com/docs/twitter-libraries seem to have chosen differently.

It's hard to tell whether this will be a problem, since (a) the range of 64-bit integers is so large and (b) they'd need to come up with a solution for languages without unsigned types like Java before they got to that point anyway.

[Sergio Schvezov (sergiusens)]

Two more things; Lucio told me it would be good to setup the Icon in the
bubble; he said it was ok to use the one provided in the click app for now;
that is located in:

/usr/share/click/preinstalled/.click/users/@all/com.ubuntu.developer.webapps.webapp-twitter/twitter.png

I will switch to loading than from the push helper once this lands (as the
helper would be part of the click itself).

The other thing is; can we inline/embed the oauth package into this trunk
as part of this merge?

PS: totally unrelated, but I can't comment on this MP.

[lp:~jamesh/account-polld/twitter-plugin]

15. By James Henstridge on 2014-07-23

Add icon to Twitter messages.

16. By James Henstridge on 2014-07-23

Embed the OAuth 1 library, since we don't have it packaged.

=== modified file 'cmd/account-polld/main.go'
--- cmd/account-polld/main.go	2014-07-17 19:54:39 +0000
+++ cmd/account-polld/main.go	2014-07-23 10:36:01 +0000
@@ -28,6 +28,7 @@
 	"launchpad.net/account-polld/plugins"
 	"launchpad.net/account-polld/plugins/facebook"
 	"launchpad.net/account-polld/plugins/gmail"
+	"launchpad.net/account-polld/plugins/twitter"
 	"launchpad.net/go-dbus/v1"
 )
 
@@ -91,8 +92,8 @@
 				plugin = facebook.New()
 			case SERVICENAME_TWITTER:
 				// This is just stubbed until the plugin exists.
-				log.Println("Unhandled account with id", data.AccountId, "for", data.ServiceName)
-				continue L
+				log.Println("Creating account with id", data.AccountId, "for", data.ServiceName)
+				plugin = twitter.New()
 			default:
 				log.Println("Unhandled account with id", data.AccountId, "for", data.ServiceName)
 				continue L

=== modified file 'plugins/facebook/facebook_test.go'
--- plugins/facebook/facebook_test.go	2014-07-17 10:25:18 +0000
+++ plugins/facebook/facebook_test.go	2014-07-23 10:36:01 +0000
@@ -120,11 +120,11 @@
 		Body:       closeWrapper{bytes.NewReader([]byte(notificationsBody))},
 	}
 	p := &fbPlugin{}
-	notifications, err := p.parseResponse(resp)
+	messages, err := p.parseResponse(resp)
 	c.Assert(err, IsNil)
-	c.Assert(len(notifications), Equals, 2)
-	c.Check(notifications[0].Card.Summary, Equals, "Sender posted on your timeline: \"The message...\"")
-	c.Check(notifications[1].Card.Summary, Equals, "Sender2's birthday was on July 7.")
+	c.Assert(len(messages), Equals, 2)
+	c.Check(messages[0].Notification.Card.Summary, Equals, "Sender posted on your timeline: \"The message...\"")
+	c.Check(messages[1].Notification.Card.Summary, Equals, "Sender2's birthday was on July 7.")
 	c.Check(p.lastUpdate, Equals, "2014-07-12T09:51:57+0000")
 }
 
@@ -134,10 +134,10 @@
 		Body:       closeWrapper{bytes.NewReader([]byte(notificationsBody))},
 	}
 	p := &fbPlugin{lastUpdate: "2014-07-08T06:17:52+0000"}
-	notifications, err := p.parseResponse(resp)
+	messages, err := p.parseResponse(resp)
 	c.Assert(err, IsNil)
-	c.Assert(len(notifications), Equals, 1)
-	c.Check(notifications[0].Card.Summary, Equals, "Sender posted on your timeline: \"The message...\"")
+	c.Assert(len(messages), Equals, 1)
+	c.Check(messages[0].Notification.Card.Summary, Equals, "Sender posted on your timeline: \"The message...\"")
 	c.Check(p.lastUpdate, Equals, "2014-07-12T09:51:57+0000")
 }
 

=== added directory 'plugins/twitter'
=== added directory 'plugins/twitter/oauth'
=== added file 'plugins/twitter/oauth/README.markdown'
--- plugins/twitter/oauth/README.markdown	1970-01-01 00:00:00 +0000
+++ plugins/twitter/oauth/README.markdown	2014-07-23 10:36:01 +0000
@@ -0,0 +1,22 @@
+# Go-OAuth
+
+Go-OAuth is a [Go](http://golang.org/) client for the OAuth 1.0, OAuth 1.0a and RFC 5849.
+
+## Installation
+
+Use the [go tool](http://weekly.golang.org/cmd/go/) to install Go-OAuth:
+
+    go get github.com/garyburd/go-oauth/oauth
+
+##License
+
+Go-OAuth is available under the [Apache License, Version 2.0](http://www.apache.org/licenses/LICENSE-2.0.html).
+
+## Documentation
+    
+- [Reference](http://godoc.org/github.com/garyburd/go-oauth/oauth)
+- [Dropbox Example](http://github.com/garyburd/go-oauth/tree/master/examples/dropbox)
+- [Netflix Example](http://github.com/garyburd/go-oauth/tree/master/examples/netflix)
+- [SmugMug Example](https://github.com/garyburd/go-oauth/tree/master/examples/smugmug)
+- [Twitter Example](http://github.com/garyburd/go-oauth/tree/master/examples/twitter) 
+- [Twitter Example on App Engine](http://github.com/garyburd/go-oauth/tree/master/examples/appengine) 

=== added file 'plugins/twitter/oauth/examples_test.go'
--- plugins/twitter/oauth/examples_test.go	1970-01-01 00:00:00 +0000
+++ plugins/twitter/oauth/examples_test.go	2014-07-23 10:36:01 +0000
@@ -0,0 +1,54 @@
+// Copyright 2013 Gary Burd
+//
+// Licensed under the Apache License, Version 2.0 (the "License"): you may
+// not use this file except in compliance with the License. You may obtain
+// a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+// WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+// License for the specific language governing permissions and limitations
+// under the License.
+
+package oauth_test
+
+import (
+	"github.com/garyburd/go-oauth/oauth"
+	"net/http"
+	"net/url"
+	"strings"
+)
+
+// This example shows how to sign a request when the URL Opaque field is used.
+// See the note at http://golang.org/pkg/net/url/#URL for information on the
+// use of the URL Opaque field.
+func ExampleClient_AuthorizationHeader(client *oauth.Client, credentials *oauth.Credentials) error {
+	form := url.Values{"maxResults": {"100"}}
+
+	// The last element of path contains a "/".
+	path := "/document/encoding%2gizp"
+
+	// Create the request with the temporary path "/".
+	req, err := http.NewRequest("GET", "http://api.example.com/", strings.NewReader(form.Encode()))
+	if err != nil {
+		return err
+	}
+
+	// Overwrite the temporary path with the actual request path.
+	req.URL.Opaque = path
+
+	// Sign the request.
+	req.Header.Set("Authorization", client.AuthorizationHeader(credentials, "GET", req.URL, form))
+
+	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+
+	resp, err := http.DefaultClient.Do(req)
+	if err != nil {
+		return err
+	}
+	defer resp.Body.Close()
+	// process the response
+	return nil
+}

=== added file 'plugins/twitter/oauth/oauth.go'
--- plugins/twitter/oauth/oauth.go	1970-01-01 00:00:00 +0000
+++ plugins/twitter/oauth/oauth.go	2014-07-23 10:36:01 +0000
@@ -0,0 +1,456 @@
+// Copyright 2010 Gary Burd
+//
+// Licensed under the Apache License, Version 2.0 (the "License"): you may
+// not use this file except in compliance with the License. You may obtain
+// a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+// WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+// License for the specific language governing permissions and limitations
+// under the License.
+
+// Package oauth is consumer interface for OAuth 1.0, OAuth 1.0a and RFC 5849.
+//
+// Redirection-based Authorization
+//
+// This section outlines how to use the oauth package in redirection-based
+// authorization (http://tools.ietf.org/html/rfc5849#section-2).
+//
+// Step 1: Create a Client using credentials and URIs provided by the server.
+// The Client can be initialized once at application startup and stored in a
+// package-level variable.
+//
+// Step 2: Request temporary credentials using the Client
+// RequestTemporaryCredentials method. The callbackURL parameter is the URL of
+// the callback handler in step 4. Save the returned credential secret so that
+// it can be later found using credential token as a key. The secret can be
+// stored in a database keyed by the token. Another option is to store the
+// token and secret in session storage or a cookie.
+//
+// Step 3: Redirect the user to URL returned from AuthorizationURL method. The
+// AuthorizationURL method uses the temporary credentials from step 2 and other
+// parameters as specified by the server.
+//
+// Step 4: The server redirects back to the callback URL specified in step 2
+// with the temporary token and a verifier. Use the temporary token to find the
+// temporary secret saved in step 2. Using the temporary token, temporary
+// secret and verifier, request token credentials using the client RequestToken
+// method. Save the returned credentials for later use in the application.
+//
+// Signing Requests
+//
+// The Client type has two low-level methods for signing requests, SignForm and
+// AuthorizationHeader.
+//
+// The SignForm method adds an OAuth signature to a form. The application makes
+// an authenticated request by encoding the modified form to the query string
+// or request body.
+//
+// The AuthorizationHeader method returns an Authorization header value with
+// the OAuth signature. The application makes an authenticated request by
+// adding the Authorization header to the request. The AuthorizationHeader
+// method is the only way to correctly sign a request if the application sets
+// the URL Opaque field when making a request.
+//
+// The Get and Post methods sign and invoke a request using the supplied
+// net/http Client. These methods are easy to use, but not as flexible as
+// constructing a request using one of the low-level methods.
+package oauth
+
+import (
+	"bytes"
+	"crypto/hmac"
+	"crypto/rand"
+	"crypto/sha1"
+	"encoding/base64"
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"io"
+	"io/ioutil"
+	"net/http"
+	"net/url"
+	"sort"
+	"strconv"
+	"strings"
+	"sync"
+	"time"
+)
+
+// noscape[b] is true if b should not be escaped per section 3.6 of the RFC.
+var noEscape = [256]bool{
+	'A': true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true,
+	'a': true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true, true,
+	'0': true, true, true, true, true, true, true, true, true, true,
+	'-': true,
+	'.': true,
+	'_': true,
+	'~': true,
+}
+
+// encode encodes string per section 3.6 of the RFC. If double is true, then
+// the encoding is applied twice.
+func encode(s string, double bool) []byte {
+	// Compute size of result.
+	m := 3
+	if double {
+		m = 5
+	}
+	n := 0
+	for i := 0; i < len(s); i++ {
+		if noEscape[s[i]] {
+			n += 1
+		} else {
+			n += m
+		}
+	}
+
+	p := make([]byte, n)
+
+	// Encode it.
+	j := 0
+	for i := 0; i < len(s); i++ {
+		b := s[i]
+		if noEscape[b] {
+			p[j] = b
+			j += 1
+		} else if double {
+			p[j] = '%'
+			p[j+1] = '2'
+			p[j+2] = '5'
+			p[j+3] = "0123456789ABCDEF"[b>>4]
+			p[j+4] = "0123456789ABCDEF"[b&15]
+			j += 5
+		} else {
+			p[j] = '%'
+			p[j+1] = "0123456789ABCDEF"[b>>4]
+			p[j+2] = "0123456789ABCDEF"[b&15]
+			j += 3
+		}
+	}
+	return p
+}
+
+type keyValue struct{ key, value []byte }
+
+type byKeyValue []keyValue
+
+func (p byKeyValue) Len() int      { return len(p) }
+func (p byKeyValue) Swap(i, j int) { p[i], p[j] = p[j], p[i] }
+func (p byKeyValue) Less(i, j int) bool {
+	sgn := bytes.Compare(p[i].key, p[j].key)
+	if sgn == 0 {
+		sgn = bytes.Compare(p[i].value, p[j].value)
+	}
+	return sgn < 0
+}
+
+func (p byKeyValue) appendValues(values url.Values) byKeyValue {
+	for k, vs := range values {
+		k := encode(k, true)
+		for _, v := range vs {
+			v := encode(v, true)
+			p = append(p, keyValue{k, v})
+		}
+	}
+	return p
+}
+
+// writeBaseString writes method, url, and params to w using the OAuth signature
+// base string computation described in section 3.4.1 of the RFC.
+func writeBaseString(w io.Writer, method string, u *url.URL, form url.Values, oauthParams map[string]string) {
+	// Method
+	w.Write(encode(strings.ToUpper(method), false))
+	w.Write([]byte{'&'})
+
+	// URL
+	scheme := strings.ToLower(u.Scheme)
+	host := strings.ToLower(u.Host)
+
+	uNoQuery := *u
+	uNoQuery.RawQuery = ""
+	path := uNoQuery.RequestURI()
+
+	switch {
+	case scheme == "http" && strings.HasSuffix(host, ":80"):
+		host = host[:len(host)-len(":80")]
+	case scheme == "https" && strings.HasSuffix(host, ":443"):
+		host = host[:len(host)-len(":443")]
+	}
+
+	w.Write(encode(scheme, false))
+	w.Write(encode("://", false))
+	w.Write(encode(host, false))
+	w.Write(encode(path, false))
+	w.Write([]byte{'&'})
+
+	// Create sorted slice of encoded parameters. Parameter keys and values are
+	// double encoded in a single step. This is safe because double encoding
+	// does not change the sort order.
+	queryParams := u.Query()
+	p := make(byKeyValue, 0, len(form)+len(queryParams)+len(oauthParams))
+	p = p.appendValues(form)
+	p = p.appendValues(queryParams)
+	for k, v := range oauthParams {
+		p = append(p, keyValue{encode(k, true), encode(v, true)})
+	}
+	sort.Sort(p)
+
+	// Write the parameters.
+	encodedAmp := encode("&", false)
+	encodedEqual := encode("=", false)
+	sep := false
+	for _, kv := range p {
+		if sep {
+			w.Write(encodedAmp)
+		} else {
+			sep = true
+		}
+		w.Write(kv.key)
+		w.Write(encodedEqual)
+		w.Write(kv.value)
+	}
+}
+
+var (
+	nonceLock    sync.Mutex
+	nonceCounter uint64
+)
+
+// nonce returns a unique string.
+func nonce() string {
+	nonceLock.Lock()
+	defer nonceLock.Unlock()
+	if nonceCounter == 0 {
+		binary.Read(rand.Reader, binary.BigEndian, &nonceCounter)
+	}
+	result := strconv.FormatUint(nonceCounter, 16)
+	nonceCounter += 1
+	return result
+}
+
+// oauthParams returns the OAuth request parameters for the given credentials,
+// method, URL and application params. See
+// http://tools.ietf.org/html/rfc5849#section-3.4 for more information about
+// signatures.
+func oauthParams(clientCredentials *Credentials, credentials *Credentials, method string, u *url.URL, form url.Values) map[string]string {
+	oauthParams := map[string]string{
+		"oauth_consumer_key":     clientCredentials.Token,
+		"oauth_signature_method": "HMAC-SHA1",
+		"oauth_timestamp":        strconv.FormatInt(time.Now().Unix(), 10),
+		"oauth_version":          "1.0",
+		"oauth_nonce":            nonce(),
+	}
+	if credentials != nil {
+		oauthParams["oauth_token"] = credentials.Token
+	}
+	if testingNonce != "" {
+		oauthParams["oauth_nonce"] = testingNonce
+	}
+	if testingTimestamp != "" {
+		oauthParams["oauth_timestamp"] = testingTimestamp
+	}
+
+	var key bytes.Buffer
+	key.Write(encode(clientCredentials.Secret, false))
+	key.WriteByte('&')
+	if credentials != nil {
+		key.Write(encode(credentials.Secret, false))
+	}
+
+	h := hmac.New(sha1.New, key.Bytes())
+	writeBaseString(h, method, u, form, oauthParams)
+	sum := h.Sum(nil)
+
+	encodedSum := make([]byte, base64.StdEncoding.EncodedLen(len(sum)))
+	base64.StdEncoding.Encode(encodedSum, sum)
+
+	oauthParams["oauth_signature"] = string(encodedSum)
+	return oauthParams
+}
+
+// Client represents an OAuth client.
+type Client struct {
+	Credentials                   Credentials
+	TemporaryCredentialRequestURI string // Also known as request token URL.
+	ResourceOwnerAuthorizationURI string // Also known as authorization URL.
+	TokenRequestURI               string // Also known as access token URL.
+}
+
+// Credentials represents client, temporary and token credentials.
+type Credentials struct {
+	Token  string // Also known as consumer key or access token.
+	Secret string // Also known as consumer secret or access token secret.
+}
+
+var (
+	testingTimestamp string
+	testingNonce     string
+)
+
+// SignForm adds an OAuth signature to form. The urlStr argument must not
+// include a query string.
+//
+// See http://tools.ietf.org/html/rfc5849#section-3.5.2 for
+// information about transmitting OAuth parameters in a request body and
+// http://tools.ietf.org/html/rfc5849#section-3.5.2 for information about
+// transmitting OAuth parameters in a query string.
+func (c *Client) SignForm(credentials *Credentials, method, urlStr string, form url.Values) error {
+	u, err := url.Parse(urlStr)
+	switch {
+	case err != nil:
+		return err
+	case u.RawQuery != "":
+		return errors.New("oauth: urlStr argument to SignForm must not include a query string")
+	}
+	for k, v := range oauthParams(&c.Credentials, credentials, method, u, form) {
+		form.Set(k, v)
+	}
+	return nil
+}
+
+// SignParam is deprecated. Use SignForm instead.
+func (c *Client) SignParam(credentials *Credentials, method, urlStr string, params url.Values) {
+	u, _ := url.Parse(urlStr)
+	u.RawQuery = ""
+	for k, v := range oauthParams(&c.Credentials, credentials, method, u, params) {
+		params.Set(k, v)
+	}
+}
+
+// AuthorizationHeader returns the HTTP authorization header value for given
+// method, URL and parameters.
+//
+// See http://tools.ietf.org/html/rfc5849#section-3.5.1 for information about
+// transmitting OAuth parameters in an HTTP request header.
+func (c *Client) AuthorizationHeader(credentials *Credentials, method string, u *url.URL, params url.Values) string {
+	p := oauthParams(&c.Credentials, credentials, method, u, params)
+	var buf bytes.Buffer
+	buf.WriteString(`OAuth oauth_consumer_key="`)
+	buf.Write(encode(p["oauth_consumer_key"], false))
+	buf.WriteString(`", oauth_nonce="`)
+	buf.Write(encode(p["oauth_nonce"], false))
+	buf.WriteString(`", oauth_signature="`)
+	buf.Write(encode(p["oauth_signature"], false))
+	buf.WriteString(`", oauth_signature_method="HMAC-SHA1", oauth_timestamp="`)
+	buf.Write(encode(p["oauth_timestamp"], false))
+	if t, ok := p["oauth_token"]; ok {
+		buf.WriteString(`", oauth_token="`)
+		buf.Write(encode(t, false))
+	}
+	buf.WriteString(`", oauth_version="1.0"`)
+	return buf.String()
+}
+
+// Get issues a GET to the specified URL with form added as a query string.
+func (c *Client) Get(client *http.Client, credentials *Credentials, urlStr string, form url.Values) (*http.Response, error) {
+	req, err := http.NewRequest("GET", urlStr, nil)
+	if err != nil {
+		return nil, err
+	}
+	if req.URL.RawQuery != "" {
+		return nil, errors.New("oauth: url must not contain a query string")
+	}
+	req.Header.Set("Authorization", c.AuthorizationHeader(credentials, "GET", req.URL, form))
+	req.URL.RawQuery = form.Encode()
+	return client.Do(req)
+}
+
+func (c *Client) do(client *http.Client, method string, credentials *Credentials, urlStr string, form url.Values) (*http.Response, error) {
+	req, err := http.NewRequest(method, urlStr, strings.NewReader(form.Encode()))
+	if err != nil {
+		return nil, err
+	}
+	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+	req.Header.Set("Authorization", c.AuthorizationHeader(credentials, method, req.URL, form))
+	return client.Do(req)
+}
+
+// Post issues a POST with the specified form.
+func (c *Client) Post(client *http.Client, credentials *Credentials, urlStr string, form url.Values) (*http.Response, error) {
+	return c.do(client, "POST", credentials, urlStr, form)
+}
+
+// Delete issues a DELETE with the specified form.
+func (c *Client) Delete(client *http.Client, credentials *Credentials, urlStr string, form url.Values) (*http.Response, error) {
+	return c.do(client, "DELETE", credentials, urlStr, form)
+}
+
+// Put issues a PUT with the specified form.
+func (c *Client) Put(client *http.Client, credentials *Credentials, urlStr string, form url.Values) (*http.Response, error) {
+	return c.do(client, "PUT", credentials, urlStr, form)
+}
+
+func (c *Client) request(client *http.Client, credentials *Credentials, urlStr string, params url.Values) (*Credentials, url.Values, error) {
+	c.SignParam(credentials, "POST", urlStr, params)
+	resp, err := client.PostForm(urlStr, params)
+	if err != nil {
+		return nil, nil, err
+	}
+	p, err := ioutil.ReadAll(resp.Body)
+	resp.Body.Close()
+	if err != nil {
+		return nil, nil, err
+	}
+	if resp.StatusCode != 200 && resp.StatusCode != 201 {
+		return nil, nil, fmt.Errorf("OAuth server status %d, %s", resp.StatusCode, string(p))
+	}
+	m, err := url.ParseQuery(string(p))
+	if err != nil {
+		return nil, nil, err
+	}
+	tokens := m["oauth_token"]
+	if len(tokens) == 0 || tokens[0] == "" {
+		return nil, nil, errors.New("oauth: token missing from server result")
+	}
+	secrets := m["oauth_token_secret"]
+	if len(secrets) == 0 { // allow "" as a valid secret.
+		return nil, nil, errors.New("oauth: secret missing from server result")
+	}
+	return &Credentials{Token: tokens[0], Secret: secrets[0]}, m, nil
+}
+
+// RequestTemporaryCredentials requests temporary credentials from the server.
+// See http://tools.ietf.org/html/rfc5849#section-2.1 for information about
+// temporary credentials.
+func (c *Client) RequestTemporaryCredentials(client *http.Client, callbackURL string, additionalParams url.Values) (*Credentials, error) {
+	params := make(url.Values)
+	for k, vs := range additionalParams {
+		params[k] = vs
+	}
+	if callbackURL != "" {
+		params.Set("oauth_callback", callbackURL)
+	}
+	credentials, _, err := c.request(client, nil, c.TemporaryCredentialRequestURI, params)
+	return credentials, err
+}
+
+// RequestToken requests token credentials from the server. See
+// http://tools.ietf.org/html/rfc5849#section-2.3 for information about token
+// credentials.
+func (c *Client) RequestToken(client *http.Client, temporaryCredentials *Credentials, verifier string) (*Credentials, url.Values, error) {
+	params := make(url.Values)
+	if verifier != "" {
+		params.Set("oauth_verifier", verifier)
+	}
+	credentials, vals, err := c.request(client, temporaryCredentials, c.TokenRequestURI, params)
+	if err != nil {
+		return nil, nil, err
+	}
+	return credentials, vals, nil
+}
+
+// AuthorizationURL returns the URL for resource owner authorization. See
+// http://tools.ietf.org/html/rfc5849#section-2.2 for information about
+// resource owner authorization.
+func (c *Client) AuthorizationURL(temporaryCredentials *Credentials, additionalParams url.Values) string {
+	params := make(url.Values)
+	for k, vs := range additionalParams {
+		params[k] = vs
+	}
+	params.Set("oauth_token", temporaryCredentials.Token)
+	return c.ResourceOwnerAuthorizationURI + "?" + params.Encode()
+}

=== added file 'plugins/twitter/oauth/oauth_test.go'
--- plugins/twitter/oauth/oauth_test.go	1970-01-01 00:00:00 +0000
+++ plugins/twitter/oauth/oauth_test.go	2014-07-23 10:36:01 +0000
@@ -0,0 +1,172 @@
+// Copyright 2010 Gary Burd
+//
+// Licensed under the Apache License, Version 2.0 (the "License"): you may
+// not use this file except in compliance with the License. You may obtain
+// a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+// WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+// License for the specific language governing permissions and limitations
+// under the License.
+
+package oauth
+
+import (
+	"bytes"
+	"net/url"
+	"testing"
+)
+
+func parseURL(urlStr string) *url.URL {
+	u, _ := url.Parse(urlStr)
+	return u
+}
+
+var oauthTests = []struct {
+	method    string
+	url       *url.URL
+	appParams url.Values
+	nonce     string
+	timestamp string
+
+	clientCredentials Credentials
+	credentials       Credentials
+
+	base   string
+	header string
+}{
+	{
+		// Simple example from Twitter OAuth tool
+		"GET",
+		parseURL("https://api.twitter.com/1/"),
+		url.Values{"page": {"10"}},
+		"8067e8abc6bdca2006818132445c8f4c",
+		"1355795903",
+		Credentials{"kMViZR2MHk2mM7hUNVw9A", "56Fgl58yOfqXOhHXX0ybvOmSnPQFvR2miYmm30A"},
+		Credentials{"10212-JJ3Zc1A49qSMgdcAO2GMOpW9l7A348ESmhjmOBOU", "yF75mvq4LZMHj9O0DXwoC3ZxUnN1ptvieThYuOAYM"},
+		`GET&https%3A%2F%2Fapi.twitter.com%2F1%2F&oauth_consumer_key%3DkMViZR2MHk2mM7hUNVw9A%26oauth_nonce%3D8067e8abc6bdca2006818132445c8f4c%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1355795903%26oauth_token%3D10212-JJ3Zc1A49qSMgdcAO2GMOpW9l7A348ESmhjmOBOU%26oauth_version%3D1.0%26page%3D10`,
+		`OAuth oauth_consumer_key="kMViZR2MHk2mM7hUNVw9A", oauth_nonce="8067e8abc6bdca2006818132445c8f4c", oauth_signature="o5cx1ggJrY9ognZuVVeUwglKV8U%3D", oauth_signature_method="HMAC-SHA1", oauth_timestamp="1355795903", oauth_token="10212-JJ3Zc1A49qSMgdcAO2GMOpW9l7A348ESmhjmOBOU", oauth_version="1.0"`,
+	},
+	{
+		// Test case and port insensitivity.
+		"GeT",
+		parseURL("https://apI.twItter.com:443/1/"),
+		url.Values{"page": {"10"}},
+		"8067e8abc6bdca2006818132445c8f4c",
+		"1355795903",
+		Credentials{"kMViZR2MHk2mM7hUNVw9A", "56Fgl58yOfqXOhHXX0ybvOmSnPQFvR2miYmm30A"},
+		Credentials{"10212-JJ3Zc1A49qSMgdcAO2GMOpW9l7A348ESmhjmOBOU", "yF75mvq4LZMHj9O0DXwoC3ZxUnN1ptvieThYuOAYM"},
+		`GET&https%3A%2F%2Fapi.twitter.com%2F1%2F&oauth_consumer_key%3DkMViZR2MHk2mM7hUNVw9A%26oauth_nonce%3D8067e8abc6bdca2006818132445c8f4c%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1355795903%26oauth_token%3D10212-JJ3Zc1A49qSMgdcAO2GMOpW9l7A348ESmhjmOBOU%26oauth_version%3D1.0%26page%3D10`,
+		`OAuth oauth_consumer_key="kMViZR2MHk2mM7hUNVw9A", oauth_nonce="8067e8abc6bdca2006818132445c8f4c", oauth_signature="o5cx1ggJrY9ognZuVVeUwglKV8U%3D", oauth_signature_method="HMAC-SHA1", oauth_timestamp="1355795903", oauth_token="10212-JJ3Zc1A49qSMgdcAO2GMOpW9l7A348ESmhjmOBOU", oauth_version="1.0"`,
+	},
+	{
+		// Example generated using the Netflix OAuth tool.
+		"GET",
+		parseURL("http://api-public.netflix.com/catalog/titles"),
+		url.Values{"term": {"Dark Knight"}, "count": {"2"}},
+		"1234",
+		"1355850443",
+		Credentials{"apiKey001", "sharedSecret002"},
+		Credentials{"accessToken003", "accessSecret004"},
+		`GET&http%3A%2F%2Fapi-public.netflix.com%2Fcatalog%2Ftitles&count%3D2%26oauth_consumer_key%3DapiKey001%26oauth_nonce%3D1234%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1355850443%26oauth_token%3DaccessToken003%26oauth_version%3D1.0%26term%3DDark%2520Knight`,
+		`OAuth oauth_consumer_key="apiKey001", oauth_nonce="1234", oauth_signature="0JAoaqt6oz6TJx8N%2B06XmhPjcOs%3D", oauth_signature_method="HMAC-SHA1", oauth_timestamp="1355850443", oauth_token="accessToken003", oauth_version="1.0"`,
+	},
+	{
+		// Test special characters in form values.
+		"GET",
+		parseURL("http://PHOTOS.example.net:8001/Photos"),
+		url.Values{"photo size": {"300%"}, "title": {"Back of $100 Dollars Bill"}},
+		"kllo~9940~pd9333jh",
+		"1191242096",
+		Credentials{"dpf43f3++p+#2l4k3l03", "secret01"},
+		Credentials{"nnch734d(0)0sl2jdk", "secret02"},
+		"GET&http%3A%2F%2Fphotos.example.net%3A8001%2FPhotos&oauth_consumer_key%3Ddpf43f3%252B%252Bp%252B%25232l4k3l03%26oauth_nonce%3Dkllo~9940~pd9333jh%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1191242096%26oauth_token%3Dnnch734d%25280%25290sl2jdk%26oauth_version%3D1.0%26photo%2520size%3D300%2525%26title%3DBack%2520of%2520%2524100%2520Dollars%2520Bill",
+		`OAuth oauth_consumer_key="dpf43f3%2B%2Bp%2B%232l4k3l03", oauth_nonce="kllo~9940~pd9333jh", oauth_signature="n1UAoQy2PoIYizZUiWvkdCxM3P0%3D", oauth_signature_method="HMAC-SHA1", oauth_timestamp="1191242096", oauth_token="nnch734d%280%290sl2jdk", oauth_version="1.0"`,
+	},
+	{
+		// Test special characters in path, multiple values for same key in form.
+		"GET",
+		parseURL("http://EXAMPLE.COM:80/Space%20Craft"),
+		url.Values{"name": {"value", "value"}},
+		"Ix4U1Ei3RFL",
+		"1327384901",
+		Credentials{"abcd", "efgh"},
+		Credentials{"ijkl", "mnop"},
+		"GET&http%3A%2F%2Fexample.com%2FSpace%2520Craft&name%3Dvalue%26name%3Dvalue%26oauth_consumer_key%3Dabcd%26oauth_nonce%3DIx4U1Ei3RFL%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1327384901%26oauth_token%3Dijkl%26oauth_version%3D1.0",
+		`OAuth oauth_consumer_key="abcd", oauth_nonce="Ix4U1Ei3RFL", oauth_signature="TZZ5u7qQorLnmKs%2Biqunb8gqkh4%3D", oauth_signature_method="HMAC-SHA1", oauth_timestamp="1327384901", oauth_token="ijkl", oauth_version="1.0"`,
+	},
+	{
+		// Test with query string in URL.
+		"GET",
+		parseURL("http://EXAMPLE.COM:80/Space%20Craft?name=value"),
+		url.Values{"name": {"value"}},
+		"Ix4U1Ei3RFL",
+		"1327384901",
+		Credentials{"abcd", "efgh"},
+		Credentials{"ijkl", "mnop"},
+		"GET&http%3A%2F%2Fexample.com%2FSpace%2520Craft&name%3Dvalue%26name%3Dvalue%26oauth_consumer_key%3Dabcd%26oauth_nonce%3DIx4U1Ei3RFL%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1327384901%26oauth_token%3Dijkl%26oauth_version%3D1.0",
+		`OAuth oauth_consumer_key="abcd", oauth_nonce="Ix4U1Ei3RFL", oauth_signature="TZZ5u7qQorLnmKs%2Biqunb8gqkh4%3D", oauth_signature_method="HMAC-SHA1", oauth_timestamp="1327384901", oauth_token="ijkl", oauth_version="1.0"`,
+	},
+	{
+		// Test "/" in form value.
+		"POST",
+		parseURL("https://stream.twitter.com/1.1/statuses/filter.json"),
+		url.Values{"track": {"example.com/abcd"}},
+		"bf2cb6d611e59f99103238fc9a3bb8d8",
+		"1362434376",
+		Credentials{"consumer_key", "consumer_secret"},
+		Credentials{"token", "secret"},
+		"POST&https%3A%2F%2Fstream.twitter.com%2F1.1%2Fstatuses%2Ffilter.json&oauth_consumer_key%3Dconsumer_key%26oauth_nonce%3Dbf2cb6d611e59f99103238fc9a3bb8d8%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1362434376%26oauth_token%3Dtoken%26oauth_version%3D1.0%26track%3Dexample.com%252Fabcd",
+		`OAuth oauth_consumer_key="consumer_key", oauth_nonce="bf2cb6d611e59f99103238fc9a3bb8d8", oauth_signature="LcxylEOnNdgoKSJi7jX07mxcvfM%3D", oauth_signature_method="HMAC-SHA1", oauth_timestamp="1362434376", oauth_token="token", oauth_version="1.0"`,
+	},
+	{
+		// Test "/" in query string
+		"POST",
+		parseURL("https://stream.twitter.com/1.1/statuses/filter.json?track=example.com/query"),
+		url.Values{},
+		"884275759fbab914654b50ae643c563a",
+		"1362435218",
+		Credentials{"consumer_key", "consumer_secret"},
+		Credentials{"token", "secret"},
+		"POST&https%3A%2F%2Fstream.twitter.com%2F1.1%2Fstatuses%2Ffilter.json&oauth_consumer_key%3Dconsumer_key%26oauth_nonce%3D884275759fbab914654b50ae643c563a%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1362435218%26oauth_token%3Dtoken%26oauth_version%3D1.0%26track%3Dexample.com%252Fquery",
+		`OAuth oauth_consumer_key="consumer_key", oauth_nonce="884275759fbab914654b50ae643c563a", oauth_signature="OAldqvRrKDXRGZ9BqSi2CqeVH0g%3D", oauth_signature_method="HMAC-SHA1", oauth_timestamp="1362435218", oauth_token="token", oauth_version="1.0"`,
+	},
+}
+
+func TestBaseString(t *testing.T) {
+	for _, ot := range oauthTests {
+		oauthParams := map[string]string{
+			"oauth_consumer_key":     ot.clientCredentials.Token,
+			"oauth_nonce":            ot.nonce,
+			"oauth_timestamp":        ot.timestamp,
+			"oauth_token":            ot.credentials.Token,
+			"oauth_signature_method": "HMAC-SHA1",
+			"oauth_version":          "1.0",
+		}
+		var buf bytes.Buffer
+		writeBaseString(&buf, ot.method, ot.url, ot.appParams, oauthParams)
+		base := buf.String()
+		if base != ot.base {
+			t.Errorf("base string for %s %s\n    = %q,\n want %q", ot.method, ot.url, base, ot.base)
+		}
+	}
+}
+
+func TestAuthorizationHeader(t *testing.T) {
+	defer func() {
+		testingNonce = ""
+		testingTimestamp = ""
+	}()
+	for _, ot := range oauthTests {
+		c := Client{Credentials: ot.clientCredentials}
+		testingNonce = ot.nonce
+		testingTimestamp = ot.timestamp
+		header := c.AuthorizationHeader(&ot.credentials, ot.method, ot.url, ot.appParams)
+		if header != ot.header {
+			t.Errorf("authorization header for %s %s\ngot:  %s\nwant: %s", ot.method, ot.url, header, ot.header)
+		}
+	}
+}

=== added file 'plugins/twitter/twitter.go'
--- plugins/twitter/twitter.go	1970-01-01 00:00:00 +0000
+++ plugins/twitter/twitter.go	2014-07-23 10:36:01 +0000
@@ -0,0 +1,214 @@
+/*
+ Copyright 2014 Canonical Ltd.
+ Authors: James Henstridge <[e-mail]>
+
+ This program is free software: you can redistribute it and/or modify it
+ under the terms of the GNU General Public License version 3, as published
+ by the Free Software Foundation.
+
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranties of
+ MERCHANTABILITY, SATISFACTORY QUALITY, or FITNESS FOR A PARTICULAR
+ PURPOSE.  See the GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License along
+ with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+package twitter
+
+import (
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"net/url"
+	"strings"
+
+	"launchpad.net/account-polld/plugins/twitter/oauth" // "github.com/garyburd/go-oauth/oauth"
+	"launchpad.net/account-polld/accounts"
+	"launchpad.net/account-polld/plugins"
+)
+
+var baseUrl, _ = url.Parse("https://api.twitter.com/1.1/")
+
+const twitterIcon = "/usr/share/click/preinstalled/.click/users/@all/com.ubuntu.developer.webapps.webapp-twitter/twitter.png"
+
+type twitterPlugin struct {
+	lastMentionId       int64
+	lastDirectMessageId int64
+}
+
+func New() plugins.Plugin {
+	return &twitterPlugin{}
+}
+
+func (p *twitterPlugin) ApplicationId() plugins.ApplicationId {
+	return "com.ubuntu.developer.webapps.webapp-twitter_webapp-twitter"
+}
+
+func (p *twitterPlugin) request(authData *accounts.AuthData, path string) (*http.Response, error) {
+	// Resolve path relative to API base URL.
+	u, err := baseUrl.Parse(path)
+	if err != nil {
+		return nil, err
+	}
+	query := u.Query()
+	u.RawQuery = ""
+
+	client := oauth.Client{
+		Credentials: oauth.Credentials{
+			Token:  authData.ClientId,
+			Secret: authData.ClientSecret,
+		},
+	}
+	token := &oauth.Credentials{
+		Token:  authData.AccessToken,
+		Secret: authData.TokenSecret,
+	}
+	return client.Get(http.DefaultClient, token, u.String(), query)
+}
+
+func (p *twitterPlugin) parseStatuses(resp *http.Response) ([]plugins.PushMessage, error) {
+	defer resp.Body.Close()
+	decoder := json.NewDecoder(resp.Body)
+
+	if resp.StatusCode != http.StatusOK {
+		var result TwitterError
+		if err := decoder.Decode(&result); err != nil {
+			return nil, err
+		}
+		return nil, &result
+	}
+
+	var statuses []status
+	if err := decoder.Decode(&statuses); err != nil {
+		return nil, err
+	}
+	pushMsg := []plugins.PushMessage{}
+	latestStatus := p.lastMentionId
+	for _, s := range statuses {
+		pushMsg = append(pushMsg, plugins.PushMessage{
+			Notification: plugins.Notification{
+				Card: &plugins.Card{
+					Summary: fmt.Sprintf("Mention from @%s", s.User.ScreenName),
+					Body:    s.Text,
+					Icon:    twitterIcon,
+				},
+			},
+		})
+		if s.Id > latestStatus {
+			latestStatus = s.Id
+		}
+	}
+	p.lastMentionId = latestStatus
+	return pushMsg, nil
+}
+
+func (p *twitterPlugin) parseDirectMessages(resp *http.Response) ([]plugins.PushMessage, error) {
+	defer resp.Body.Close()
+	decoder := json.NewDecoder(resp.Body)
+
+	if resp.StatusCode != http.StatusOK {
+		var result TwitterError
+		if err := decoder.Decode(&result); err != nil {
+			return nil, err
+		}
+		return nil, &result
+	}
+
+	var dms []directMessage
+	if err := decoder.Decode(&dms); err != nil {
+		return nil, err
+	}
+	pushMsg := []plugins.PushMessage{}
+	latestDM := p.lastDirectMessageId
+	for _, m := range dms {
+		pushMsg = append(pushMsg, plugins.PushMessage{
+			Notification: plugins.Notification{
+				Card: &plugins.Card{
+					Summary: fmt.Sprintf("Direct message from @%s", m.Sender.ScreenName),
+					Body:    m.Text,
+					Icon:    twitterIcon,
+				},
+			},
+		})
+		if m.Id > latestDM {
+			latestDM = m.Id
+		}
+	}
+	p.lastDirectMessageId = latestDM
+	return pushMsg, nil
+}
+
+func (p *twitterPlugin) Poll(authData *accounts.AuthData) (messages []plugins.PushMessage, err error) {
+	url := "statuses/mentions_timeline.json"
+	if p.lastMentionId > 0 {
+		url = fmt.Sprintf("%s?since_id=%d", url, p.lastMentionId)
+	}
+	resp, err := p.request(authData, url)
+	if err != nil {
+		return
+	}
+	messages, err = p.parseStatuses(resp)
+	if err != nil {
+		return
+	}
+
+	url = "direct_messages.json"
+	if p.lastDirectMessageId > 0 {
+		url = fmt.Sprintf("%s?since_id=%d", url, p.lastDirectMessageId)
+	}
+	resp, err = p.request(authData, url)
+	if err != nil {
+		return
+	}
+	dms, err := p.parseDirectMessages(resp)
+	if err != nil {
+		return
+	}
+	messages = append(messages, dms...)
+	return
+}
+
+// Status format is described here:
+// https://dev.twitter.com/docs/api/1.1/get/statuses/mentions_timeline
+type status struct {
+	Id        int64  `json:"id"`
+	CreatedAt string `json:"created_at"`
+	User      user   `json:"user"`
+	Text      string `json:"text"`
+}
+
+// Direct message format is described here:
+// https://dev.twitter.com/docs/api/1.1/get/direct_messages
+type directMessage struct {
+	Id        int64  `json:"id"`
+	CreatedAt string `json:"created_at"`
+	Sender    user   `json:"sender"`
+	Recipient user   `json:"recipient"`
+	Text      string `json:"text"`
+}
+
+type user struct {
+	Id         int64  `json:"id"`
+	ScreenName string `json:"screen_name"`
+	Name       string `json:"name"`
+	Image      string `json:"profile_image_url"`
+}
+
+// The error response format is described here:
+// https://dev.twitter.com/docs/error-codes-responses
+type TwitterError struct {
+	Errors []struct {
+		Code    int    `json:"code"`
+		Message string `json:"message"`
+	} `json:"errors"`
+}
+
+func (err *TwitterError) Error() string {
+	messages := make([]string, len(err.Errors))
+	for i := range err.Errors {
+		messages[i] = err.Errors[i].Message
+	}
+	return strings.Join(messages, "\n")
+}

=== added file 'plugins/twitter/twitter_test.go'
--- plugins/twitter/twitter_test.go	1970-01-01 00:00:00 +0000
+++ plugins/twitter/twitter_test.go	2014-07-23 10:36:01 +0000
@@ -0,0 +1,455 @@
+/*
+ Copyright 2014 Canonical Ltd.
+ Authors: James Henstridge <[e-mail]>
+
+ This program is free software: you can redistribute it and/or modify it
+ under the terms of the GNU General Public License version 3, as published
+ by the Free Software Foundation.
+
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranties of
+ MERCHANTABILITY, SATISFACTORY QUALITY, or FITNESS FOR A PARTICULAR
+ PURPOSE.  See the GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License along
+ with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+package twitter
+
+import (
+	"bytes"
+	"io"
+	"net/http"
+	"testing"
+
+	. "launchpad.net/gocheck"
+)
+
+type S struct{}
+
+func init() {
+	Suite(S{})
+}
+
+func TestAll(t *testing.T) {
+	TestingT(t)
+}
+
+// closeWraper adds a dummy Close() method to a reader
+type closeWrapper struct {
+	io.Reader
+}
+
+func (r closeWrapper) Close() error {
+	return nil
+}
+
+const (
+	errorBody = `
+{
+  "errors": [
+    {
+      "message":"Sorry, that page does not exist",
+      "code":34
+    }
+  ]
+}`
+	statusesBody = `
+[
+  {
+    "coordinates": null,
+    "favorited": false,
+    "truncated": false,
+    "created_at": "Mon Sep 03 13:24:14 +0000 2012",
+    "id_str": "242613977966850048",
+    "entities": {
+      "urls": [
+
+      ],
+      "hashtags": [
+
+      ],
+      "user_mentions": [
+        {
+          "name": "Jason Costa",
+          "id_str": "14927800",
+          "id": 14927800,
+          "indices": [
+            0,
+            11
+          ],
+          "screen_name": "jasoncosta"
+        },
+        {
+          "name": "Matt Harris",
+          "id_str": "777925",
+          "id": 777925,
+          "indices": [
+            12,
+            26
+          ],
+          "screen_name": "themattharris"
+        },
+        {
+          "name": "ThinkWall",
+          "id_str": "117426578",
+          "id": 117426578,
+          "indices": [
+            109,
+            119
+          ],
+          "screen_name": "thinkwall"
+        }
+      ]
+    },
+    "in_reply_to_user_id_str": "14927800",
+    "contributors": null,
+    "text": "@jasoncosta @themattharris Hey! Going to be in Frisco in October. Was hoping to have a meeting to talk about @thinkwall if you're around?",
+    "retweet_count": 0,
+    "in_reply_to_status_id_str": null,
+    "id": 242613977966850048,
+    "geo": null,
+    "retweeted": false,
+    "in_reply_to_user_id": 14927800,
+    "place": null,
+    "user": {
+      "profile_sidebar_fill_color": "EEEEEE",
+      "profile_sidebar_border_color": "000000",
+      "profile_background_tile": false,
+      "name": "Andrew Spode Miller",
+      "profile_image_url": "http://a0.twimg.com/profile_images/1227466231/spode-balloon-medium_normal.jpg",
+      "created_at": "Mon Sep 22 13:12:01 +0000 2008",
+      "location": "London via Gravesend",
+      "follow_request_sent": false,
+      "profile_link_color": "F31B52",
+      "is_translator": false,
+      "id_str": "16402947",
+      "entities": {
+        "url": {
+          "urls": [
+            {
+              "expanded_url": null,
+              "url": "http://www.linkedin.com/in/spode",
+              "indices": [
+                0,
+                32
+              ]
+            }
+          ]
+        },
+        "description": {
+          "urls": [
+
+          ]
+        }
+      },
+      "default_profile": false,
+      "contributors_enabled": false,
+      "favourites_count": 16,
+      "url": "http://www.linkedin.com/in/spode",
+      "profile_image_url_https": "https://si0.twimg.com/profile_images/1227466231/spode-balloon-medium_normal.jpg",
+      "utc_offset": 0,
+      "id": 16402947,
+      "profile_use_background_image": false,
+      "listed_count": 129,
+      "profile_text_color": "262626",
+      "lang": "en",
+      "followers_count": 2013,
+      "protected": false,
+      "notifications": null,
+      "profile_background_image_url_https": "https://si0.twimg.com/profile_background_images/16420220/twitter-background-final.png",
+      "profile_background_color": "FFFFFF",
+      "verified": false,
+      "geo_enabled": true,
+      "time_zone": "London",
+      "description": "Co-Founder/Dev (PHP/jQuery) @justFDI. Run @thinkbikes and @thinkwall for events. Ex tech journo, helps run @uktjpr. Passion for Linux and customises everything.",
+      "default_profile_image": false,
+      "profile_background_image_url": "http://a0.twimg.com/profile_background_images/16420220/twitter-background-final.png",
+      "statuses_count": 11550,
+      "friends_count": 770,
+      "following": null,
+      "show_all_inline_media": true,
+      "screen_name": "spode"
+    },
+    "in_reply_to_screen_name": "jasoncosta",
+    "source": "<a href=\"http://www.journotwit.com\" rel=\"nofollow\">JournoTwit</a>",
+    "in_reply_to_status_id": null
+  },
+  {
+    "coordinates": {
+      "coordinates": [
+        121.0132101,
+        14.5191613
+      ],
+      "type": "Point"
+    },
+    "favorited": false,
+    "truncated": false,
+    "created_at": "Mon Sep 03 08:08:02 +0000 2012",
+    "id_str": "242534402280783873",
+    "entities": {
+      "urls": [
+
+      ],
+      "hashtags": [
+        {
+          "text": "twitter",
+          "indices": [
+            49,
+            57
+          ]
+        }
+      ],
+      "user_mentions": [
+        {
+          "name": "Jason Costa",
+          "id_str": "14927800",
+          "id": 14927800,
+          "indices": [
+            14,
+            25
+          ],
+          "screen_name": "jasoncosta"
+        }
+      ]
+    },
+    "in_reply_to_user_id_str": null,
+    "contributors": null,
+    "text": "Got the shirt @jasoncosta thanks man! Loving the #twitter bird on the shirt :-)",
+    "retweet_count": 0,
+    "in_reply_to_status_id_str": null,
+    "id": 242534402280783873,
+    "geo": {
+      "coordinates": [
+        14.5191613,
+        121.0132101
+      ],
+      "type": "Point"
+    },
+    "retweeted": false,
+    "in_reply_to_user_id": null,
+    "place": null,
+    "user": {
+      "profile_sidebar_fill_color": "EFEFEF",
+      "profile_sidebar_border_color": "EEEEEE",
+      "profile_background_tile": true,
+      "name": "Mikey",
+      "profile_image_url": "http://a0.twimg.com/profile_images/1305509670/chatMikeTwitter_normal.png",
+      "created_at": "Fri Jun 20 15:57:08 +0000 2008",
+      "location": "Singapore",
+      "follow_request_sent": false,
+      "profile_link_color": "009999",
+      "is_translator": false,
+      "id_str": "15181205",
+      "entities": {
+        "url": {
+          "urls": [
+            {
+              "expanded_url": null,
+              "url": "http://about.me/michaelangelo",
+              "indices": [
+                0,
+                29
+              ]
+            }
+          ]
+        },
+        "description": {
+          "urls": [
+
+          ]
+        }
+      },
+      "default_profile": false,
+      "contributors_enabled": false,
+      "favourites_count": 11,
+      "url": "http://about.me/michaelangelo",
+      "profile_image_url_https": "https://si0.twimg.com/profile_images/1305509670/chatMikeTwitter_normal.png",
+      "utc_offset": 28800,
+      "id": 15181205,
+      "profile_use_background_image": true,
+      "listed_count": 61,
+      "profile_text_color": "333333",
+      "lang": "en",
+      "followers_count": 577,
+      "protected": false,
+      "notifications": null,
+      "profile_background_image_url_https": "https://si0.twimg.com/images/themes/theme14/bg.gif",
+      "profile_background_color": "131516",
+      "verified": false,
+      "geo_enabled": true,
+      "time_zone": "Hong Kong",
+      "description": "Android Applications Developer,  Studying Martial Arts, Plays MTG, Food and movie junkie",
+      "default_profile_image": false,
+      "profile_background_image_url": "http://a0.twimg.com/images/themes/theme14/bg.gif",
+      "statuses_count": 11327,
+      "friends_count": 138,
+      "following": null,
+      "show_all_inline_media": true,
+      "screen_name": "mikedroid"
+    },
+    "in_reply_to_screen_name": null,
+    "source": "<a href=\"http://twitter.com/download/android\" rel=\"nofollow\">Twitter for Android</a>",
+    "in_reply_to_status_id": null
+  }
+]`
+	directMessagesBody = `
+[
+{
+    "created_at": "Mon Aug 27 17:21:03 +0000 2012",
+    "entities": {
+        "hashtags": [],
+        "urls": [],
+        "user_mentions": []
+    },
+    "id": 240136858829479936,
+    "id_str": "240136858829479936",
+    "recipient": {
+        "contributors_enabled": false,
+        "created_at": "Thu Aug 23 19:45:07 +0000 2012",
+        "default_profile": false,
+        "default_profile_image": false,
+        "description": "Keep calm and test",
+        "favourites_count": 0,
+        "follow_request_sent": false,
+        "followers_count": 0,
+        "following": false,
+        "friends_count": 10,
+        "geo_enabled": true,
+        "id": 776627022,
+        "id_str": "776627022",
+        "is_translator": false,
+        "lang": "en",
+        "listed_count": 0,
+        "location": "San Francisco, CA",
+        "name": "Mick Jagger",
+        "notifications": false,
+        "profile_background_color": "000000",
+        "profile_background_image_url": "http://a0.twimg.com/profile_background_images/644522235/cdjlccey99gy36j3em67.jpeg",
+        "profile_background_image_url_https": "https://si0.twimg.com/profile_background_images/644522235/cdjlccey99gy36j3em67.jpeg",
+        "profile_background_tile": true,
+        "profile_image_url": "http://a0.twimg.com/profile_images/2550226257/y0ef5abcx5yrba8du0sk_normal.jpeg",
+        "profile_image_url_https": "https://si0.twimg.com/profile_images/2550226257/y0ef5abcx5yrba8du0sk_normal.jpeg",
+        "profile_link_color": "000000",
+        "profile_sidebar_border_color": "000000",
+        "profile_sidebar_fill_color": "000000",
+        "profile_text_color": "000000",
+        "profile_use_background_image": false,
+        "protected": false,
+        "screen_name": "s0c1alm3dia",
+        "show_all_inline_media": false,
+        "statuses_count": 0,
+        "time_zone": "Pacific Time (US & Canada)",
+        "url": "http://cnn.com",
+        "utc_offset": -28800,
+        "verified": false
+    },
+    "recipient_id": 776627022,
+    "recipient_screen_name": "s0c1alm3dia",
+    "sender": {
+        "contributors_enabled": true,
+        "created_at": "Sat May 09 17:58:22 +0000 2009",
+        "default_profile": false,
+        "default_profile_image": false,
+        "description": "I taught your phone that thing you like.  The Mobile Partner Engineer @Twitter. ",
+        "favourites_count": 584,
+        "follow_request_sent": false,
+        "followers_count": 10621,
+        "following": false,
+        "friends_count": 1181,
+        "geo_enabled": true,
+        "id": 38895958,
+        "id_str": "38895958",
+        "is_translator": false,
+        "lang": "en",
+        "listed_count": 190,
+        "location": "San Francisco",
+        "name": "Sean Cook",
+        "notifications": false,
+        "profile_background_color": "1A1B1F",
+        "profile_background_image_url": "http://a0.twimg.com/profile_background_images/495742332/purty_wood.png",
+        "profile_background_image_url_https": "https://si0.twimg.com/profile_background_images/495742332/purty_wood.png",
+        "profile_background_tile": true,
+        "profile_image_url": "http://a0.twimg.com/profile_images/1751506047/dead_sexy_normal.JPG",
+        "profile_image_url_https": "https://si0.twimg.com/profile_images/1751506047/dead_sexy_normal.JPG",
+        "profile_link_color": "2FC2EF",
+        "profile_sidebar_border_color": "181A1E",
+        "profile_sidebar_fill_color": "252429",
+        "profile_text_color": "666666",
+        "profile_use_background_image": true,
+        "protected": false,
+        "screen_name": "theSeanCook",
+        "show_all_inline_media": true,
+        "statuses_count": 2608,
+        "time_zone": "Pacific Time (US & Canada)",
+        "url": null,
+        "utc_offset": -28800,
+        "verified": false
+    },
+    "sender_id": 38895958,
+    "sender_screen_name": "theSeanCook",
+    "text": "booyakasha"
+}
+]
+`
+)
+
+func (s S) TestParseStatuses(c *C) {
+	resp := &http.Response{
+		StatusCode: http.StatusOK,
+		Body:       closeWrapper{bytes.NewReader([]byte(statusesBody))},
+	}
+	p := &twitterPlugin{}
+	messages, err := p.parseStatuses(resp)
+	c.Assert(err, IsNil)
+	c.Assert(len(messages), Equals, 2)
+	c.Check(messages[0].Notification.Card.Summary, Equals, "Mention from @spode")
+	c.Check(messages[0].Notification.Card.Body, Equals, "@jasoncosta @themattharris Hey! Going to be in Frisco in October. Was hoping to have a meeting to talk about @thinkwall if you're around?")
+	c.Check(messages[1].Notification.Card.Summary, Equals, "Mention from @mikedroid")
+	c.Check(messages[1].Notification.Card.Body, Equals, "Got the shirt @jasoncosta thanks man! Loving the #twitter bird on the shirt :-)")
+	c.Check(p.lastMentionId, Equals, int64(242613977966850048))
+}
+
+func (s S) TestParseStatusesError(c *C) {
+	resp := &http.Response{
+		StatusCode: http.StatusBadRequest,
+		Body:       closeWrapper{bytes.NewReader([]byte(errorBody))},
+	}
+	p := &twitterPlugin{}
+	messages, err := p.parseStatuses(resp)
+	c.Check(messages, IsNil)
+	c.Assert(err, Not(IsNil))
+	twErr := err.(*TwitterError)
+	c.Assert(len(twErr.Errors), Equals, 1)
+	c.Check(twErr.Errors[0].Message, Equals, "Sorry, that page does not exist")
+	c.Check(twErr.Errors[0].Code, Equals, 34)
+}
+
+func (s S) TestParseDirectMessages(c *C) {
+	resp := &http.Response{
+		StatusCode: http.StatusOK,
+		Body:       closeWrapper{bytes.NewReader([]byte(directMessagesBody))},
+	}
+	p := &twitterPlugin{}
+	messages, err := p.parseDirectMessages(resp)
+	c.Assert(err, IsNil)
+	c.Assert(len(messages), Equals, 1)
+	c.Check(messages[0].Notification.Card.Summary, Equals, "Direct message from @theSeanCook")
+	c.Check(messages[0].Notification.Card.Body, Equals, "booyakasha")
+	c.Check(p.lastDirectMessageId, Equals, int64(240136858829479936))
+}
+
+func (s S) TestParseDirectMessagesError(c *C) {
+	resp := &http.Response{
+		StatusCode: http.StatusBadRequest,
+		Body:       closeWrapper{bytes.NewReader([]byte(errorBody))},
+	}
+	p := &twitterPlugin{}
+	messages, err := p.parseDirectMessages(resp)
+	c.Check(messages, IsNil)
+	c.Assert(err, Not(IsNil))
+	twErr := err.(*TwitterError)
+	c.Assert(len(twErr.Errors), Equals, 1)
+	c.Check(twErr.Errors[0].Message, Equals, "Sorry, that page does not exist")
+	c.Check(twErr.Errors[0].Code, Equals, 34)
+}