Postman Testing for OAuth Authorization & Authentication

Name: Postman Testing for OAuth Authorization & Authentication
Rating: 4.4 (457 reviews)

Learn about why OAuth is important and how to use it with APIs like: Dropbox, Flickr and many more.

Created byValentin Despa, Valentin Despa - Support

Last updated 6/2024

English

What you'll learn

Learn the fundamentals or OAuth
Use OAuth to access APIs
Work with the Dropbox API
Work with the Flickr API

Course content

4 sections • 24 lectures • 1h 16m total length

Introduction to APIs and Postman7:12
Explore how to use Postman to interact with web APIs, build get and post requests, view JSON responses, manage endpoints, and save requests in a collection.
Token-based authentication (JWT token)9:12
API tests and variables in Postman8:48
Learn to delete orders via Postman, write basic tests to verify status codes, and use environments and variables to manage base URL and tokens.

Why do we need OAuth?3:24
Overview of the OAuth 2.0 Authorzation Code grant4:10
Register your client application with Dropbox4:12
Register your Dropbox client and obtain the app key and secret. Set up a Postman environment, define a redirect URL, and disable the implicit grant for OAuth testing.
Setup the scope0:03
Specifying the scope0:04
Step 1: Getting the authorization code7:13
Debugging requests with the Postman console1:47
Step 2: Getting the access token2:46
Demonstrate getting an access token with Postman using the authorization code grant, including client credentials in the body for backend security and noting implicit flow for front-end apps.
Step 3: Using the access token to get data5:17
Authorize using the browser vs Postman0:36
OAuth 2.0 Implicit Code Grant flow2:23
Explore the OAuth 2.0 implicit grant flow in Postman, including token delivery via the browser, missing token URL and client secret, and the security trade-offs versus the authorization code grant.
Conclusion0:43
Download Postman collection for Dropbox OAuth 2.00:12

Requirements

The Postman App should be installed
You should have a good understanding of the HTTP protocol
You should know how to build requests in Postman

Description

This course provides a comprehensive introduction to API authorization testing using OAuth in Postman. Throughout the course, you will gain an in-depth understanding of the fundamental concepts of OAuth, including its different flows and uses. You will learn how OAuth is applied in various real-world situations, such as backend applications, single-page applications, and mobile apps.

The course also provides hands-on experience with using different OAuth flows and how to create requests using Postman. You will work with different real-world APIs and learn to use Postman to send requests and validate the responses.

In addition to the theoretical aspects of OAuth 1.0 and OAuth 2.0 and their practical application, the course also covers testing. You will learn how to test OAuth flows and APIs using Postman, and gain the knowledge and skills needed to test and debug your OAuth-secured APIs effectively. This course will provide you with a solid foundation for working with OAuth and APIs in a practical and efficient manner.

Here are some of the topics that we will do in this course:

Token-based authentication (JWT token)
OAuth 2.0 Authorization Code grant
OAuth 2.0 Implicit Code Grant flow
OAuth 1.0 flow with the Flickr API

Credits

This OAuth logo is licensed under the Creative Commons Attribution-Share Alike 3.0 Unported license (creativecommons . org/licenses/by-sa/3.0/deed.en). Author: Chris Messina

Who this course is for:

Students who want to learn how to use OAuth

Postman Testing for OAuth Authorization & Authentication

What you'll learn

Explore related topics

Course content

Introduction3 lectures • 25min

OAuth 2.0 flow with the Dropbox API and Postman13 lectures • 33min

OAuth 1.0 flow with the Flickr API and Postman7 lectures • 18min

Conclusion1 lecture • 1min

Requirements

Description

Who this course is for: