diff --git a/lib/oauth.js b/lib/oauth.js
index b0f7ab884..c24209b89 100644
--- a/lib/oauth.js
+++ b/lib/oauth.js
@@ -81,7 +81,7 @@ OAuth.prototype.concatParams = function (oa, sep, wrap) {
   }).sort()
 
   if (oa.realm) {
-    params.splice(0, 1, 'realm')
+    params.splice(0, 0, 'realm')
   }
   params.push('oauth_signature')
 
diff --git a/tests/test-oauth.js b/tests/test-oauth.js
index 940fe0ec3..f27c0a271 100644
--- a/tests/test-oauth.js
+++ b/tests/test-oauth.js
@@ -427,6 +427,7 @@ tape('query transport_method + form option + url params', function(t) {
         'c@': '',
         a2: 'r b',
         realm: 'Example',
+        oauth_consumer_key: '9djdj82h48djs9d2',
         oauth_nonce: '7d8f3e4a',
         oauth_signature_method: 'HMAC-SHA1',
         oauth_timestamp: '137131201',
@@ -472,6 +473,7 @@ tape('query transport_method + qs option + url params', function(t) {
         'c@': '',
         c2: '',
         realm: 'Example',
+        oauth_consumer_key: '9djdj82h48djs9d2',
         oauth_nonce: '7d8f3e4a',
         oauth_signature_method: 'HMAC-SHA1',
         oauth_timestamp: '137131201',
@@ -543,6 +545,7 @@ tape('body transport_method + form option + url params', function(t) {
       { c2: '',
         a3: '2 q',
         realm: 'Example',
+        oauth_consumer_key: '9djdj82h48djs9d2',
         oauth_nonce: '7d8f3e4a',
         oauth_signature_method: 'HMAC-SHA1',
         oauth_timestamp: '137131201',