if (atConsumer == null || !consumerKey.equals(atConsumer.getKey())) {
throw newUnauthorizedException();
}
nonceKey = "t:" + token;
secrets.tokenSecret(accessToken.getSecret());
sc = new OAuth1SecurityContext(accessToken, request.getSecurityContext().isSecure());
}
if (!verifySignature(osr, params, secrets)) {
throw newUnauthorizedException();