![]() ![]() Simply select 'Fetch Tokens' and it'll figure it out. Thanks to the OAuth 2.0 spec, Postman can figure out that GET login is possible and if you don't specify POST, Postman will default to using GET login with credentials in the URL query params. (and if your tools don't support POST requests, time to find better tools!) This is the only justification to use GET login requests - always use POST login if possible. Looker supports GET login requests only because some crude web tools still don't support making POST requests. Passing credentials in a POST body is much more secure. ![]() Passing credentials in URL queries carries a risk that the credentials may get captured in browser histories or in a log in a server somewhere along the network route. POST login is strongly recommended for maximum security. GET requests do not need a Content-Type header because GET requests don't have a request body. For customers using low-level HTTP requests by hand, remind them to set the Content-Type because a POST without a content type is invalid HTTP and will fail before it even reaches the Looker instance.)įor GET login requests, the client_id and client_secret must be passed as URL query params. Looker's API login supports both POST and GET login requests.įor POST login requests, the client_id and client_secret must be passed in the body of the request, and must be x-(Postman/Insomnia will do this for you when you select "Form URL Encoded" from the menu. A simple SAFE endpoint to test with that doesn't require any prior knowledge of ids is GET/api/3.1/user (aka "me()"). Test an endpoint by adding a method (notice the GET request in the screenshot).Postman/Insomnia will capture that access_token value and apply it to the Authorization header in subsequent API requests. Select ‘Fetch Tokens’ and an access_token field will be returned in the response.In advanced options select ‘in request body’ (this selects a POST login request).In OAuth 2.0 set the grant type to Resource Owner Password Credentials.Allows one to organize, execute, and debug HTTP requests. "Postman is the only complete API development environment, for API developers, used by more than 5 million developers and 100000 companies worldwide." ( ) If anyone is interested in using an API dev environment like Postman or Insomnia as an alternative to curl or the Ruby SDK there are instructions below. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |