This content originally appeared on DEV Community and was authored by Iacovos Constantinou
Working with short lived JWTs can be painful when you don't have an automated mechanism in place to refresh the token. This is quite common when setting up a new collection in Postman.
In this post we will be looking on how we can automate this, so that we retrieve, refresh and use the token right before each API call.
Environment configuration
Before we get started, we need to define a few environment variables in Postman. These are:
-
baseUrlAPI URL -
usernameThe username to connect with -
passwordThe password for the above username
Unfortunately, there's no way to display the password as a ... password field. Postman will store and display everything in clear text, so have that in mind.
Pre-request script
Then, we need to edit the collection and configure the Pre-request script code. To do that, right click on the collection, select edit and then "Pre-request scripts"
Here is an example. As you can see the implementation is quite generic so most likely you will need to adjust a few things to make that work for you.
How it works
Initially we check whether we have a token stored. If not we go ahead and retrieve a new one along with expiration time.
We store both in environment variables. You don't need to create these variables, the script will create them whenever necessary.
If the token exists, we check also whether it has expired. In that case, we refresh the token and similarly to above we store the new token and its expiry date.
In either case, the token will be stored in a new environment variable called accessToken. This can be used to define the default authorization method. To do this right click on the collection, select edit, then Authorisation and use the variable {{accessToken}}.
Conclusion
I hope you find this approach useful and hopefully it will save you from some time from manual actions.
Make sure to follow me on dev.to, Medium or Twitter to read more about PHP, Docker and other dev topics.
This content originally appeared on DEV Community and was authored by Iacovos Constantinou
Iacovos Constantinou | Sciencx (2021-11-04T18:04:47+00:00) Automatic authorization in Postman. Retrieved from https://www.scien.cx/2021/11/04/automatic-authorization-in-postman/
Please log in to upload a file.
There are no updates yet.
Click the Upload button above to add an update.