starred/hoppscotch

Fork 0

mirror of https://github.com/hoppscotch/hoppscotch.git synced 2026-04-25 16:55:59 +03:00

[GH-ISSUE #3798] [bug]: "Generate Token" failed due to authorization code flow is sending with GET for OAuth 2.0 #1329

New issue

Closed

opened 2026-03-16 19:50:52 +03:00 by kerem · 4 comments

kerem commented

2026-03-16 19:50:52 +03:00

Owner

Originally created by @Leon-Luu on GitHub (Feb 1, 2024).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/3798

Is there an existing issue for this?

I have searched the existing issues

Current behavior

We are not able to Generate Token and received errors for the OAuth2.0 authentication with Client Credential flow. During the request to the authentication server we could see the browser network inspect that Request Method is GET which causing authorization server returning rejections.

With the same OAuth2.0 authentication request using Postman with the Grant type => Client Credential,

Postman is able to retrieve the access token by "Get New Access Token" as Postman always send to OAuth2 request as POST .

How is Hoppscotch supporting this Grant type : Client Credentials flow for OAuth2.0 ?

Steps to reproduce

Create a request to an authorized API with OAuth2.
Set authorization type to "OAuth 2.0".
Configure the authorization code flow by setting client id & secret
Click "Generate Token".

=> Expected response with access tokens

Environment

Production

Version

Cloud

Originally created by @Leon-Luu on GitHub (Feb 1, 2024). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/3798 ### Is there an existing issue for this? - [X] I have searched the existing issues ### Current behavior We are not able to Generate Token and received errors for the OAuth2.0 authentication with Client Credential flow. During the request to the authentication server we could see the browser network inspect that Request Method is GET which causing authorization server returning rejections. With the same OAuth2.0 authentication request using Postman with the Grant type => Client Credential, <img width="403" alt="image" src="https://github.com/hoppscotch/hoppscotch/assets/88329746/73244044-564b-495c-a13b-c2cd686855fc"> Postman is able to retrieve the access token by "Get New Access Token" as Postman always send to OAuth2 request as POST . How is Hoppscotch supporting this [Grant type : Client Credentials](https://www.ory.sh/docs/oauth2-oidc/client-credentials) flow for OAuth2.0 ? ### Steps to reproduce Create a request to an authorized API with OAuth2. Set authorization type to "OAuth 2.0". Configure the authorization code flow by setting client id & secret Click "Generate Token". => Expected response with access tokens ### Environment Production ### Version Cloud

kerem

2026-03-16 19:50:52 +03:00

closed this issue
added the
bug

need testing
labels

kerem commented

2026-03-16 19:51:08 +03:00

Author

Owner

@liyasthomas commented on GitHub (Feb 2, 2024):

@amk-dev can you look into this?

@liyasthomas commented on GitHub (Feb 2, 2024): @amk-dev can you look into this?

kerem commented

2026-03-16 19:51:13 +03:00

Author

Owner

@Leon-Luu commented on GitHub (Feb 2, 2024):

Updated with more info that this is Client Credentials flow of OAuth2.0 which is not working/supported in Hoppscotch

@Leon-Luu commented on GitHub (Feb 2, 2024): Updated with more info that this is Client Credentials flow of OAuth2.0 which is not working/supported in Hoppscotch

kerem commented

2026-03-16 19:51:18 +03:00

Author

Owner

@Leon-Luu commented on GitHub (Feb 2, 2024):

I can see this is related to https://github.com/hoppscotch/hoppscotch/pull/3413 , when can you merge that feature?

@Leon-Luu commented on GitHub (Feb 2, 2024): I can see this is related to https://github.com/hoppscotch/hoppscotch/pull/3413 , when can you merge that feature?

kerem commented

2026-03-16 19:51:23 +03:00

Author

Owner

@Leon-Luu commented on GitHub (Mar 12, 2024):

Same as https://github.com/hoppscotch/hoppscotch/pull/3413

@Leon-Luu commented on GitHub (Mar 12, 2024): Same as https://github.com/hoppscotch/hoppscotch/pull/3413

kerem referenced this issue

2026-03-17 00:53:03 +03:00

[PR #1354] [MERGED] Web Worker regex test #3255