get_home_url() no longer forces 'http'. Only 2 params are passed in so that WordPress can determine the proper scheme to use.

Author: trevordevore

lib/class-wp-json-authentication-oauth1.php

@@ -522,12 +522,12 @@ protected function check_oauth_signature( $consumer, $oauth_params, $token = nul
 		$params = array_merge( $params, $oauth_params );
 
 		// Support WP blog roots that point to a folder and not just a domain
-		$home_url_path = parse_url(get_home_url (null,'','http'), PHP_URL_PATH );
+		$home_url_path = parse_url(get_home_url (null,''), PHP_URL_PATH );
 		$request_uri_path = parse_url( $_SERVER['REQUEST_URI'], PHP_URL_PATH );
 		if (substr($request_uri_path, 0, strlen($home_url_path)) == $home_url_path) {
 			$request_uri_path = substr($request_uri_path, strlen($home_url_path));
 		}
-		$base_request_uri = rawurlencode( get_home_url( null, $request_uri_path, 'http' ) );
+		$base_request_uri = rawurlencode( get_home_url( null, $request_uri_path ) );
 
 		// get the signature provided by the consumer and remove it from the parameters prior to checking the signature
 		$consumer_signature = rawurldecode( $params['oauth_signature'] );