Where do i find Client Secret

chandulella23 · October 5, 2018, 5:02am

I am tryiing to run postman imported collections from okta to Get ID Token with Code.
Can any one tell me where does client secret lies in the application for authorization to make a request.
username : client id (i got this one in the application general settings)
password: client secret (help me through this one)

ajaxsoap · October 5, 2018, 7:02am

If you chose "Web" on "Add Application", you can see on the the "General" tab, Client Credentials section with Client ID and Client Secret as pictured below:

But if you choose the Single page App there’s no client secret, just client ID.

In your case, I guess you chose Single Page App option.

chandulella23 · October 5, 2018, 7:10am

Thanks for your reply,
Yeah i choosed SPA but in case if i want to get access token i need to make a request https://dev-654002.oktapreview.com/oauth2/v1/token .

Here i need to provide client id and client secret as Authorization

ajaxsoap · October 5, 2018, 7:33am

Tthere’s separate thread regarding the token endpoint thru postman, maybe try their methodology see if that’s fix your issues.

sibelius · May 17, 2019, 2:13pm

What is the proper way to handle logout on SPA applications?

dragos · May 17, 2019, 5:04pm

Hi @sibelius

You can use /logout endpoint which is described here to log out the user successfully.