# 400 Error Authorize flow

**URL:** <https://devforum.okta.com/t/400-error-authorize-flow/19359>\
**Category:** Questions\
**Created:** [February 11, 2022, 5:13am UTC](https://devforum.okta.com/t/400-error-authorize-flow/19359 "2022-02-11T05:13:57Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anshu](https://avatars.discourse-cdn.com/v4/letter/a/e0b2c6/32.png) [@Anshu](https://devforum.okta.com/u/Anshu)\
**Post date:** [February 11, 2022, 5:13am UTC](https://devforum.okta.com/t/400-error-authorize-flow/19359/1 "2022-02-11T05:13:57Z")

</div>

I am trying to learn authorization flow and trying to test it through postman but getting this error  
Please see the attachments for okta app settings and postman settings

 ![Okta3](https://global.discourse-cdn.com/oktadev/original/2X/8/8c0d6a17ee22f3405ea34e90052bf951c5dff9a9.gif)

 ![Okta](https://global.discourse-cdn.com/oktadev/original/2X/8/8e91ea48f9bebdc2a10d439f44d06b2c48d1a6e9.gif)  
 ![Okta2](https://global.discourse-cdn.com/oktadev/original/2X/c/cd3d644afac916ddc089a5264dad9938a6e3bf8f.gif)

Any help is greatly appreciated.  
I am stuck for 4 hours and trying to find a solution.  
Thanks,  
Anshu

---

<div class="post-metadata">

**Author:** ![aaronpk](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/aaronpk/32/1737_2.png) [@aaronpk](https://devforum.okta.com/u/aaronpk)\
**Post date:** [February 11, 2022, 6:24am UTC](https://devforum.okta.com/t/400-error-authorize-flow/19359/2 "2022-02-11T06:24:19Z")

</div>

It looks like in your okta app config you have the redirect URL as `http` but in postman it’s `https`, that’s why the error says the redirect URL provided isn’t one of the ones registered

---

<div class="post-metadata">

**Author:** ![Anshu](https://avatars.discourse-cdn.com/v4/letter/a/e0b2c6/32.png) [@Anshu](https://devforum.okta.com/u/Anshu)\
**Post date:** [February 11, 2022, 1:30pm UTC](https://devforum.okta.com/t/400-error-authorize-flow/19359/3 "2022-02-11T13:30:57Z")

</div>

Hi Aaron,  
Thanks for replying.  
After matching the redirect uri’s, I get the Okta login page in Postman, I login to Okta but I dont see the token generated.  
Also where is the code that I generated with authorize command needs to go in Postman in Auth tab as I think I wont get token until and unless I tell the code, correct?

When I run curl command I get the token,What am I doing wrong in Postman  
Do u have a link or documentation that can help me in Postman. I was watching your safari live training it has postman but it shows the snapshot of postman results not the settings in postman?

Thanks,  
Anshu

---

<div class="post-metadata">

**Author:** ![aaronpk](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/aaronpk/32/1737_2.png) [@aaronpk](https://devforum.okta.com/u/aaronpk)\
**Post date:** [February 11, 2022, 2:18pm UTC](https://devforum.okta.com/t/400-error-authorize-flow/19359/4 "2022-02-11T14:18:52Z")

</div>

Yeah this is why I stopped using Postman for the exercises, it takes longer to explain how to do this in Postman vs using curl or anything else, and then all you learn is how to use postman.

Double check that you’ve set up postman to make a POST request, and that the request is form-encoded not JSON.

---

<div class="post-metadata">

**Author:** ![Anshu](https://avatars.discourse-cdn.com/v4/letter/a/e0b2c6/32.png) [@Anshu](https://devforum.okta.com/u/Anshu)\
**Post date:** [February 11, 2022, 3:24pm UTC](https://devforum.okta.com/t/400-error-authorize-flow/19359/5 "2022-02-11T15:24:58Z")

</div>

Hi Aaron,  
Still no luck.  
When I check the console it gives me error

 ![Okta4](https://global.discourse-cdn.com/oktadev/original/2X/7/76194ab61cb73a714150beb78056b44e1c5980a2.gif)  
 ![Okta5](https://global.discourse-cdn.com/oktadev/original/2X/3/3447fa1b202d41eed1f324769647ff26937d803d.gif)

---

<div class="post-metadata">

**Author:** ![Anshu](https://avatars.discourse-cdn.com/v4/letter/a/e0b2c6/32.png) [@Anshu](https://devforum.okta.com/u/Anshu)\
**Post date:** [February 11, 2022, 4:13pm UTC](https://devforum.okta.com/t/400-error-authorize-flow/19359/6 "2022-02-11T16:13:30Z")

</div>

I got it working with typing everything in Params tab but not in Authorization tab.  
I will give up on Authorization tab for now. 🙂

Thanks for helping me out.  
Anshu

---

<div class="post-metadata">

**Author:** ![aaronpk](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/aaronpk/32/1737_2.png) [@aaronpk](https://devforum.okta.com/u/aaronpk)\
**Post date:** [March 7, 2022, 5:02am UTC](https://devforum.okta.com/t/400-error-authorize-flow/19359/7 "2022-03-07T05:02:15Z")

</div>

Glad you got it’s working. The error message in your last screenshot is the clue. “Cannot supply multiple client credentials”. Looks like you had the client secret in both the post body and the authorization header.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [February 8, 2024, 9:43pm UTC](https://devforum.okta.com/t/400-error-authorize-flow/19359/8 "2024-02-08T21:43:00Z")

</div>

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.
