You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the Issue
After generating an OAuth2 authentication token, the request that use the token failed because an IDP cookie not been sent.
The flow is working correctly on Postman v7.36.5.
Steps to Reproduce
It is a little bit tricky to reproduce, since it required multiple pieces:
Create an application that support Auth2 (implicit) authentication
In Postman, create new "GET" request with a url to your app.
Go to "Authorization" tab:
3.1 select "OAuth 2.0" type
3.2 Fill in the fields in "Configure New Token"
3.3 Click on "Get New Access Token", fill in login details on the pop-up window.
3.4 After receiving a token, click on "Use Token" button.
Click "Send", to send the request
In my case, at that point, I receive the IDP (Okta) error page.
Downgrade to Postman v7.36.5, and with the same flow I got a valid response from my application.
With some help from Okta support, we found that a cookie that been sent to the Client on the "Generate New Token" process, not been sent in the request. If we add that cookie manually to the request, the request been sent successfully to my application and returned a valid response.
If I will click on "Generate New Token" again, the IDP login window will not pop-up, and a valid token will be generated, so we also assume that the cookie been saved in Postman, but not been sent with the request to my application.
Environment Information
Postman Version: 8.3.0
Operating System: Windows 10 64 bit
Thanks,
Tal
The text was updated successfully, but these errors were encountered:
Describe the Issue
After generating an OAuth2 authentication token, the request that use the token failed because an IDP cookie not been sent.
The flow is working correctly on Postman v7.36.5.
Steps to Reproduce
It is a little bit tricky to reproduce, since it required multiple pieces:
3.1 select "OAuth 2.0" type
3.2 Fill in the fields in "Configure New Token"
3.3 Click on "Get New Access Token", fill in login details on the pop-up window.
3.4 After receiving a token, click on "Use Token" button.
In my case, at that point, I receive the IDP (Okta) error page.
Downgrade to Postman v7.36.5, and with the same flow I got a valid response from my application.
With some help from Okta support, we found that a cookie that been sent to the Client on the "Generate New Token" process, not been sent in the request. If we add that cookie manually to the request, the request been sent successfully to my application and returned a valid response.
If I will click on "Generate New Token" again, the IDP login window will not pop-up, and a valid token will be generated, so we also assume that the cookie been saved in Postman, but not been sent with the request to my application.
Environment Information
Thanks,
Tal
The text was updated successfully, but these errors were encountered: