The oauth extension doesn't allow using the HTTP_OAUTH_MAC challenge scheme, as described below: ClientResource cr = (...) cr.setChallengeResponse(ChallengeScheme.HTTP_OAUTH_MAC, userToken, secretToken);