#!/usr/bin/env perl
use Modern::Perl '2015';
use Math::Random::MT 'rand';
use Net::OAuth;
use URL::Encode 'url_encode';
use HTTP::Request;
use LWP::UserAgent;
use JSON::XS;
use Data::Dumper 'Dumper';

my $content = '<?xml version="1.0" encoding="UTF-8"?>
<FIXML xmlns="http://www.fixprotocol.org/FIXML-5-0-SP2">
  <Order TmInForce="0" Typ="2" Side="1" Px="13" Acct="38619105">
    <Instrmt SecTyp="CS" Sym="AAPL"/>
  <OrdQty Qty="1"/> </Order>
</FIXML>';

my $oauth = Net::OAuth->request('protected resource')->new(
    consumer_key     => '...',
    consumer_secret  => '...',
    token            => '...',
    token_secret     => '...',

    protocol_version => Net::OAuth::PROTOCOL_VERSION_1_0A,
    signature_method => 'HMAC-SHA1',
    timestamp        => time,
    nonce            => int( rand( 2**32 ) ),

    request_url      => 'https://api.tradeking.com/v1/accounts/38619105/orders.json',
    request_method   => 'POST',
    extra_params     => { POSTDATA => $content },
);

$oauth->signature_elements( [ @{ $oauth->signature_elements }, $content ] );

my $request = HTTP::Request->new(
    $oauth->request_method,
    $oauth->request_url,
    [
        'Authorization' => $oauth->to_authorization_header,
        'Content-Type'  => 'application/x-www-form-urlencoded',
        'TKI_TRADEPASS' => 'myPass',
        'TKI_OVERRIDE'  => 'true',
    ],
    $content,
);

say $request->as_string;

my $response = LWP::UserAgent->new->request($request);

if ( not $response->is_success ) {
    say $response->message;
    say $response->content;
}
else {
    say Dumper( JSON::XS->new->decode( $response->content ) );
}