Do not use Host header.

Token server can be totally different then resource server.

bt5/erp5_bearer_token/SkinTemplateItem/portal_skins/erp5_bearer_token/BearerToken_getHMAC.xml

@@ -51,9 +51,8 @@
         <item>
             <key> <string>_body</string> </key>
             <value> <string>return context.Base_getHMAC(key,\n
-  """%s\\n%s\\n%s\\n%s\\n%s""" % (\n
+  """%s\\n%s\\n%s\\n%s""" % (\n
     context.REQUEST.getHeader(\'User-Agent\'),\n
-    context.REQUEST.getHeader(\'Host\'),\n
     context.REQUEST.get(\'REMOTE_ADDR\'),\n
     context.getCreationDate().timeTime(),\n
     fuzzy)\n

bt5/erp5_bearer_token/bt/revision

-3
+4
\ No newline at end of file