Using postman to get Access Token

Questions OAuth/OIDC
17

Hi @reemasaluja,

Have you tried refreshing the access token using postman collections?
I believe the documentation in this link is quite straightforward - https://developer.okta.com/authentication-guide/tokens/refreshing-tokens

I understand that using interceptors in postman can be hard, so you can try the following -

  1. Go to https://oidcdebugger.com/ (This is a tool written by @nate.barbettini to test OIDC endpoints)
  2. Enter the details according to your org. (You can set the state to any value)
    OpenID_Connect_debugger
    OpenID_Connect_debugger.jpg2364×1634 257 KB
  3. Make sure that you have added the redirect uri https://oidcdebugger.com/debug into your okta web application
  4. An authorization code will be returned to you in the next page, which can be used to get tokens using postman
    refresh-token
    refresh-token.jpg1938×1424 407 KB
  5. You can now use this refresh token to get a new access token
    access-token
    access-token.jpg1962×1456 346 KB

Try the above steps and see if it works for you.
If it works in postman, I don’t see a reason for it not working in your code.

BTW, in the code you posted I see you’re using config.auth.id in Authorization header. Can you check if it’s defined or if you should be using config.auth.clientId?

1 Like