Good Video Valentin. Learned a lot from this Video. Hope to see more like this in the future, e.g. a second part maybe picking up some of the questions raised here. I would be also interesting how the refresh token process will work in your example scenario with Dropbox. Is this somehow an automated process in PM or does it need manual steps as well? Thanks!
Hey this was an indepth analysis of Oauth2 and authorization, very good content, thanks a lot for this kind of content, would be helful if you can show the code how to achieve this in javascript.
I am not able to do the last step where you clicked open postman. I am using MacBook and using Chrome browser. It gives error as 403 and doesn’t redirect to postman desktop APP. Where exactly I need to give permission so chrome can open Postman?
the access token get expires after few hours how to get the refresh token in dropbox api and how to use the refresh token to automatically get the access token
You saved me...I was stuck for a couple of hours...thank you so much! It was the 'send client credentials in body' that I didn't think of trying. Thank you! 🙏🏼
Sir in my case access token generate 138 characters and also shown expires_in 14400 but your case 64 characters and also not showing as expires_in token generate how help of me i want 64 characters token and want not expired then
It is hard to answer this with the given information. Consider posting your question in the Postman community (community.postman.com/) and share what you have tried so far and where did you get stuck. Include screenshots and as many details as possible. Feel free to tag me with @vdespa. Thanks!
Hi Valentin, great video. I recently completed a oauth 2.0 authentication for box api. The first step they mention in their documentation is to generate an authorization URL . This url, when hit using a browser generates an alpha numeric code, which is then used as a key value pair in the body of x-www-form-urlencoded, which would then generate an access-token and a refresh-token. Is it possible to automate the redirect_url step in airflow or python? or this needs to be done manually, only one time?
Hi Valentin! Thank you for doing this video. It looks like Dropbox has changed their scoping which breaks your app demo. When you click Request Token in Postman the browser returns Error (400) No scope requested can be granted for this app. Do you have an update we can follow to fix this? Thank you!
Hi Peter, thanks for your report. It is hard to know what the problem is in this case. Join the Facebook community (see link in the description) and ask your question there. Consider adding more details, including screenshots. Thanks for understanding.
@@vdespa Yes, same thing happened to me when I tried doing the "request Token" step at 14:45 and got a 400 Error. Any input will be highly appreciated.
Can anyone possibly help me replicate this flow in a react/flask app? Obviously I'd like to trigger the Oauth process from the front end, but I'd rather handle the actual auth & subsequent api call from flask. I can't seem to find any good examples that show where to start. Any help at all would be greatly appreciated!
OAuth2 is a specification and it works relatively similar regardless of which technology implements the flow. What have you tried and where did you get stuck?
Hi Valentin The access token I am given is expiring after some hours. How can I automate generating a new one, like from running with Newman? Do you need to manually click the Get new access token button?
I am generating a dropbox toI am generating a dropbox token from an account in which I am a publisher. My plan is Dropbox Basic, I am using 1.5GB from 2GB Does that influence the fact that said token expires? In principle, I received a token of 142 characters, but then I generated a 64 character token and it still expires. What could be influencing the expiration of the token?
Tokens expire for security reasons. When you get a token, you also get the expiration. I hope this helps. Let me know if you have any other questions related to this.
I follow your guide but I got an Error: [object Object] ?error=invalid_request&error_description=Invalid+scopes%3A+&state= . From your example, you leave the State and Scope empty. But I it looks like It does not work for my case. Could you help me to explain?
It is hard to know what the problem is in this case. Join the Facebook community (see link in the description) and ask your question there. Consider adding more details, including screenshots. Thanks for understanding.
Did everything as shown in the video including the January 2021 update from the description, managed to get the Auth Key but I am getting this when trying to send the request. Could you help, please? Error in call to API function "files/list_folder ": Unknown API function: /2/files/list_folder
Hello Valentin. Is it possible to automate OAuth 2.0 when receiving code through SMS and if so could you produce a tutorial on how to achieve this please.
Hi David, it is possible. I have described the steps in a blog post: medium.com/apis-with-valentine/automated-api-testing-strategy-for-services-using-sms-based-two-factor-authentication-2fa-in-264b7ce81892
Hi valentine, this is great thank you. One question. When we use implicit flow, why don't we need to send client secret? How does the server know the client is really the client if the client doesnt provide the secret?
I have troubles to make an Oauth 2.0 with twitter.. sitting on that one for quite long time now, could you please explain auth_url and access token URL for tweeter ?
Consider posting your question in the Postman community (community.postman.com/) and share what you have tried so far and where did you get stuck. Include screenshots and as many details as possible. Feel free to tag me with @vdespa. Thanks!
![[UNCUT] “บอสณวัฒน์” ลากไส้!! ใครหนุนหลัง "แม่ตั๊ก ป๋าเบียร์" I คนดังนั่งเคลียร์ I 30 ก.ย. 67](http://i.ytimg.com/vi/QlD7mU2KKRk/mqdefault.jpg)
👉 Want to learn more about Postman? Check my complete Postman online course.
vdespa.com/courses/?q=TH-cam
why not using permanent token from dropbox?
I have not seen tutorials this good in awhile, thanks a lot!
Thanks for your appreciation!
Thank you Valentin for these great postman tutorials! I have watched almost all of your postman videos and they have really helped me out.
Thank you, Dawn. Much appreciated 😊
Wish I had this tutorial when I started learning OAuth2 :D
I hope it still helps.
You the ocean of knowledge in API
😂 thank you, I am still learning a few things.
Awesome tutorial. Helped me a lot to get started with DropBox API!!
Glad it helped! You are welcome. Thank you for leaving a comment.
Good Video Valentin. Learned a lot from this Video. Hope to see more like this in the future, e.g. a second part maybe picking up some of the questions raised here. I would be also interesting how the refresh token process will work in your example scenario with Dropbox. Is this somehow an automated process in PM or does it need manual steps as well? Thanks!
Thanks for the reminder, Frank. I will come back with an update.
Thanks for the video. It does help!
Glad it helped! You are welcome. Thank you for leaving a comment.
Hey this was an indepth analysis of Oauth2 and authorization, very good content, thanks a lot for this kind of content, would be helful if you can show the code how to achieve this in javascript.
Noted! I will look into creating a tutorial that shows this, maybe with Angular or React.
I am not able to do the last step where you clicked open postman. I am using MacBook and using Chrome browser. It gives error as 403 and doesn’t redirect to postman desktop APP. Where exactly I need to give permission so chrome can open Postman?
the access token get expires after few hours how to get the refresh token in dropbox api and how to use the refresh token to automatically get the access token
Thank you So much ! @Valentin Despa Loved your session you are Fab! sir, requesting you to create new series of UI-Path/Automation AnyWhere...
Thanks for your suggestions. What are you trying to do with UI-Path/Automation AnyWhere. Please reach out with more details.
@@vdespa just trying times learn and update my self... So I can automate even processes... I love doing automation project/process..
Excellent explanation. Never seen such a practical demonstration of oauth in other sites
Thanks. I am glad it was useful.
How to get token for implicit grant type in oauth2 authorization using a javascript code in postman
Hey Valentin..Do you know how to connect Drop box with Dell Boomi?
You saved me...I was stuck for a couple of hours...thank you so much! It was the 'send client credentials in body' that I didn't think of trying. Thank you! 🙏🏼
Glad it helped! Your generosity is much appreciated.
Wonderful tutorial on Oauth 2.0!
Thanks for watching 😊
how long is the authorization access token valid for ?
Super Info .
Its first time that somebody has explained OAuth 2.0 precisely .
Thanks a lot again.
You are most welcome
Will using the PKCE flow change anything for this tutorial?
Not much. The PKCE flow is just an extension to what I have presented in the auth code flow. You just need to select PKCE in Postman.
You have so soo nicely explained each and every step.Thankyou.
My pleasure 😊. You are welcome. Thank you for leaving a comment.
Great Tutorial , was really helpful to understand OAuth 2.0 using postman
Glad it was helpful!
Sir in my case access token generate 138 characters and also shown expires_in 14400 but your case 64 characters and also not showing as expires_in token generate how help of me i want 64 characters token and want not expired then
It is hard to answer this with the given information. Consider posting your question in the Postman community (community.postman.com/) and share what you have tried so far and where did you get stuck. Include screenshots and as many details as possible. Feel free to tag me with @vdespa. Thanks!
Thanks for the explanation, it is very useful
Glad it was helpful! You are welcome. Thank you for leaving a comment.
Hi Valentin, great video. I recently completed a oauth 2.0 authentication for box api. The first step they mention in their documentation is to generate an authorization URL . This url, when hit using a browser generates an alpha numeric code, which is then used as a key value pair in the body of x-www-form-urlencoded, which would then generate an access-token and a refresh-token.
Is it possible to automate the redirect_url step in airflow or python? or this needs to be done manually, only one time?
Hi Valentin! Thank you for doing this video. It looks like Dropbox has changed their scoping which breaks your app demo. When you click Request Token in Postman the browser returns Error (400) No scope requested can be granted for this app. Do you have an update we can follow to fix this? Thank you!
Hi Peter, thanks for your report. It is hard to know what the problem is in this case. Join the Facebook community (see link in the description) and ask your question there. Consider adding more details, including screenshots. Thanks for understanding.
@@vdespa Yes, same thing happened to me when I tried doing the "request Token" step at 14:45 and got a 400 Error. Any input will be highly appreciated.
I have added some screenshots on how to fix this issue here: github.com/vdespa/Postman_Dropbox_API_Auth2.0
Well done, dude. Cheers.
Glad you enjoyed it! You are welcome. Thank you for leaving a comment.
very nicely explained
Thank you so much 🙂
Could please make a video on automation of oauth 2.0 pkce , in postman ? Thanks
Thanks for your suggestion. Which API are you trying to use with PKCE?
Thanks for your suggestion. Which API are you trying to use with PKCE?
Thank u
Welcome
Can anyone possibly help me replicate this flow in a react/flask app?
Obviously I'd like to trigger the Oauth process from the front end, but I'd rather handle the actual auth & subsequent api call from flask.
I can't seem to find any good examples that show where to start.
Any help at all would be greatly appreciated!
OAuth2 is a specification and it works relatively similar regardless of which technology implements the flow. What have you tried and where did you get stuck?
See Nat Sakamura’s channel.
Hi Valentin
The access token I am given is expiring after some hours. How can I automate generating a new one, like from running with Newman? Do you need to manually click the Get new access token button?
You can't automatically click on buttons from Postman. If you have a refresh token, you can try refreshing it.
@@vdespa Not following what you mean with "If you have a refresh token, you can try refreshing it".
In OAuth2, a refresh token allows you to get a new access token.
I am generating a dropbox toI am generating a dropbox token from an account in which I am a publisher.
My plan is Dropbox Basic, I am using 1.5GB from 2GB
Does that influence the fact that said token expires?
In principle, I received a token of 142 characters,
but then I generated a 64 character token and it still expires.
What could be influencing the expiration of the token?
Tokens expire for security reasons. When you get a token, you also get the expiration. I hope this helps. Let me know if you have any other questions related to this.
I follow your guide but I got an Error: [object Object] ?error=invalid_request&error_description=Invalid+scopes%3A+&state= . From your example, you leave the State and Scope empty. But I it looks like It does not work for my case. Could you help me to explain?
It is hard to know what the problem is in this case. Join the Facebook community (see link in the description) and ask your question there. Consider adding more details, including screenshots. Thanks for understanding.
I have added some screenshots on how to fix this issue here: github.com/vdespa/Postman_Dropbox_API_Auth2.0
Did everything as shown in the video including the January 2021 update from the description, managed to get the Auth Key but I am getting this when trying to send the request. Could you help, please?
Error in call to API function "files/list_folder
": Unknown API function: /2/files/list_folder
Did you check the API documentation to see if this endpoint still exists?
@@vdespa i checked the API documentation and the endpoint is still present
@@kvidkvid5847 Please join the Discord server are share more details there.
Hello Valentin. Is it possible to automate OAuth 2.0 when receiving code through SMS and if so could you produce a tutorial on how to achieve this please.
Hi David,
it is possible. I have described the steps in a blog post: medium.com/apis-with-valentine/automated-api-testing-strategy-for-services-using-sms-based-two-factor-authentication-2fa-in-264b7ce81892
@@vdespa Many thanks Valentin. A very interesting and all encompassing solution to 2fa automation. Thank you.
how to get long lived token
This depends on your application, some don't support it. Sometimes you may need to create one manually in the database.
@@vdespa How can i create one manually in the database?
Hi valentine, this is great thank you. One question. When we use implicit flow, why don't we need to send client secret? How does the server know the client is really the client if the client doesnt provide the secret?
This flow is for clients who can't keep secrets. Obviously, it is less secure.
Acmedcalicilmifaarax full nam
I have troubles to make an Oauth 2.0 with twitter.. sitting on that one for quite long time now, could you please explain auth_url and access token URL for tweeter ?
Consider posting your question in the Postman community (community.postman.com/) and share what you have tried so far and where did you get stuck. Include screenshots and as many details as possible. Feel free to tag me with @vdespa. Thanks!