This chapter describes how to set up different clients.
- Create a new Collection
- Set the authorization method of the new Collection to Oauth 2.0
- Configure Oauth 2.0
Setting | Value | Note |
---|---|---|
Token Name | My-First-Test-Token | Can be anything you like |
Grant Type | Authorization Code (With PKCE) | Must match a grant type enabled for the client. |
Callback URL | Check Authorize using browser |
|
Auth URL | http://localhost/oauth2/authorize | The host can vary depending on your local env. |
Access Token | URL: http://localhost/oauth2/access-token | The host can vary depending on your local env. |
Client ID | postman-sample-client | The client identifier |
Client Secret | your-client-secret | The secret you used when creating the client. |
- Click "Get New Access Token".
- The Oauth 2.0 client authentication flow will start.
- In case you're not logged in you will be prompted to log in to your app as usual.
- Authorize the Postman Sample Client by clicking "Allow".
- The client is now authorized, and you will be redirected back to Postman.
- Click "Use Token" in Postman.
- Click "Save Collection".
- Create a new Request inside your Collection
- Configure the new Request
- Set the request url.
If you created the example API controller as described above you can use
http://localhost/api/user/me
. - Make sure the "Authorization" is set to "Inherit auth from parent".
- Set the request url.
If you created the example API controller as described above you can use
- Send the Request by clicking "Send".
The request will contain an Authorization header containing"Bearer eyJ0eXAiO..."
.