unable to test it via postman

[iamnaveenkumar]

Please provide us with the following information:

HI Team,

i am not able to generate token and send to this api via rest clients like postman. can you please gudie me on this?

This issue is for a: (mark with an x)

- [ ] bug report -> please search issues before submitting
- [ ] feature request
- [X] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

Step 1: Open Postman
Step 2: using the http://localhost:3000/api and change the method to post
step 3: using the authorization tab and then select Oauth 2.0 & Add to Request Header then click get new access token
Step 4: Fill the details for Grant Type Client Credentials
Step 5: Then request for new token and then use for your request.
Step 6: Still api will throw unanthorized

Any log messages given by the failure

Expected/desired behavior

OS and Version?

Windows 7, 8 or 10. Linux (which distribution). macOS (Yosemite? El Capitan? Sierra?)
Linux (Ubuntu 18.04)

Versions

Mention any other details that might be useful

---

Thanks! We'll be in touch soon.

[timmyreilly]

To test via postman:

1. Enter a url like this to a browser:
   https://login.microsoftonline.com/72f988bf-your-dir-id-2d7cd011db47/oauth2/authorize?client_id=yourclientid-01e8-4430-90cb-539005ac6d29&response_type=code

2. Take the url you get:

http://localhost:4200/?code=HHHHHHIAAACEfexXxjamQb3OeGQ4GugvNU-H4N4NV64D2RMqqpOGHRIu202Ox5j8FdxtHlyN14YhYs69vfK2BrFLwnQCLEdmj_r5jUCym0BshfyFJr9t5Vzcu99zSf56HpLaGJywYZEcUas5ytWFB8Uwr4q1b15vOqAMuL44TRPS2oaR224KxzVXcXirrDvx976nhy-Ky7LAHnljUYUj99kUqiWVDiZYPDgVzCyiT0xyLfERRO-4snW5q4Z9rjIA046-yA5O842Wtm2CfW8kossRLYiZURaAmo55xdadbP_kB4kTcAGuh1ETfW0_3exZ3g3afqToEhece3OUDQ1dh54H8WQZZ18SDcE9ol8D[...mysecret...]FEYYncfFpqG_Rw9Pcq5TcFsw7IBX3OQ6XS3c7w3q9D3IJ401WfphVxt2-XJ4weGWFDra7cCalBRB1x3rR5_IZDk7osMATZbXKXH38ikNBPX6D9LtdJ9nihN_ewu-bwcQlQBk_DsZkHECjxbCJdEva-378xHQEnz7AhYpVrOOLKJ4rVx7_7OwdIshoggk12rXH1KN15VkskxWBcOltRUdrhw1YItPmwjPgMHIAA&session_state=8460a0b8-211d-42e1-a475-64cc3e3b99e8

3. Remove everything but code:

HHHHHIAAACEfexXxjamQb3OeGQ4GugvNU-H4N4NV64D2RMqqpOG[...mysecret..]7osMATZbXKXH38ikNBPX6D9LtdJ9nihN_ewu-bwcQlQBk_DsZkHECjxbCJdEva-378xHQEnz7AhYpVrOOLKJ4rVx7_7OwdIshoggk12rXH1KN15VkskxWBcOltRUdrhw1YItPmwjPgMHIAA

4. Use this in a POST with postman to a route like this:

https://login.microsoftonline.com/72f988bf-your-dir-id-2d7cd011db47/oauth2/token
With these fields:

You'll be returned an access token, refresh token, and id_token.