Skip to main content
You can use Postman, a popular HTTP client, to test your OAuth 2.0 configuration. Depending on the method of authorization used by your app, you can configure Postman to use OAuth 2.0 or API keys.

​
OAuth 2.0

Postman provides excellent support for request authorization using OAuth 2.0.

​
Registration

When registering an OAuth 2.0 client, include Postman’s redirect endpoint URIs in the list of redirect URIs for your client.

​
Configuration

On “Authorization” tab, in the “Auth Type”, select “OAuth 2.0” option. Then, in “Configure New Token” section, provide following configuration options.
Postman variablesWe recommend using Postman environment variables to store the base URL of the authorization server and client credentials. This will allow you to quickly switch between staging and production versions of your client.
To run an OAuth 2.0 flow using Postman as a client, press “Get New Access Token” button. Postman will then open Pleo OAuth 2.0 authorization UI. After granting authorization, you will be redirected back to Postman, which will automatically run an access token request and obtain an access token. Postman can also automatically obtain new access tokens to replace expired ones, using refresh tokens.

​
API keys

Postman can easily be configured to access Pleo APIs using API keys.

​
Configuration

  1. Switch to “Authorization tab”.
  2. Select “Basic Auth” in the “Type” dropdown menu.
  3. Provide your API key as the “Username”. Leave “Password” field blank.
testing-pleo-oauth-and-apis-using-postman
Postman variablesWe recommend storing your API keys as Postman environment variables.