[GH-ISSUE #5688] [bug]: Collection Authorization method passed as Query Parameter by default #2210

Closed
opened 2026-03-16 23:35:05 +03:00 by kerem · 2 comments
Owner

Originally created by @AaronFortG on GitHub (Dec 11, 2025).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/5688

Originally assigned to: @anwarulislam, @AaronFortG on GitHub.

Is there an existing issue for this?

  • I have searched existing issues and this bug hasn't been reported yet

Platform

Web App

Browser

Chrome

Operating System

macOS

Bug Description

What happened?

When exporting a Collection from Postman, which has the Authorization method set as API Key added to the Header, and importing it to Hoppscotch, the Authorization method is passed as Query Parameter (instead if Header as originally was set).

How to reproduce?

  1. Export Collection from Postman using JSON with v2.1
  2. Import Collection into Hoppscotch
  3. Check how Authorization is passed into requests (inside Collection's properties).

Screenshots

Postman Authorization method:

Image

Hoppscotch Authorization method:

Image

More context

From what I see, when exporting the Collection from Postman as JSON there are these two different dumps:

When Authorization is set as Query Parameter in Postman:

    "auth": {
		"type": "apikey",
		"apikey": [
			{
				"key": "in",
				"value": "query",
				"type": "string"
			},
			{
				"key": "value",
				"value": "{{AUTH_TOKEN}}",
				"type": "string"
			},
			{
				"key": "key",
				"value": "Authorization",
				"type": "string"
			}
		]
	},

When Authorization is set as Header in Postman:

    "auth": {
		"type": "apikey",
		"apikey": [
			{
				"key": "value",
				"value": "{{AUTH_TOKEN}}",
				"type": "string"
			},
			{
				"key": "key",
				"value": "Authorization",
				"type": "string"
			}
		]
	},

As we can see, the key "in" only appears when it's a Query Parameter, so that could be useful when trying to fix this issue and determine wether the collection imported uses Header or Query Parameters for the Authorization method, in order to avoid setting an invalid initial value.

Deployment Type

Hoppscotch Cloud

Version

latest (since using hoppscotch.io web)

Originally created by @AaronFortG on GitHub (Dec 11, 2025). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/5688 Originally assigned to: @anwarulislam, @AaronFortG on GitHub. ### Is there an existing issue for this? - [x] I have searched existing issues and this bug hasn't been reported yet ### Platform Web App ### Browser Chrome ### Operating System macOS ### Bug Description ## What happened? When exporting a Collection from Postman, which has the Authorization method set as API Key added to the **Header**, and importing it to Hoppscotch, the Authorization method is passed as **Query Parameter** (instead if Header as originally was set). ## How to reproduce? 1. Export Collection from Postman using JSON with v2.1 2. Import Collection into Hoppscotch 3. Check how Authorization is passed into requests (inside Collection's properties). ## Screenshots ### Postman Authorization method: <img width="791" height="478" alt="Image" src="https://github.com/user-attachments/assets/6326a8b2-2596-4093-aa39-c02e1a26f133" /> ### Hoppscotch Authorization method: <img width="1013" height="320" alt="Image" src="https://github.com/user-attachments/assets/9d806577-9d29-4814-a48f-6816334c3dd5" /> ## More context From what I see, when exporting the Collection from Postman as JSON there are these two different dumps: When Authorization is set as **Query Parameter** in Postman: ```json "auth": { "type": "apikey", "apikey": [ { "key": "in", "value": "query", "type": "string" }, { "key": "value", "value": "{{AUTH_TOKEN}}", "type": "string" }, { "key": "key", "value": "Authorization", "type": "string" } ] }, ``` When Authorization is set as **Header** in Postman: ```json "auth": { "type": "apikey", "apikey": [ { "key": "value", "value": "{{AUTH_TOKEN}}", "type": "string" }, { "key": "key", "value": "Authorization", "type": "string" } ] }, ``` As we can see, the key "in" only appears when it's a Query Parameter, so that could be useful when trying to fix this issue and determine wether the collection imported uses Header or Query Parameters for the Authorization method, in order to avoid setting an invalid initial value. ### Deployment Type Hoppscotch Cloud ### Version latest (since using hoppscotch.io web)
kerem 2026-03-16 23:35:05 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@AaronFortG commented on GitHub (Dec 16, 2025):

I just did a PR fixing this issue (#5701), feel free to check it out and let me know guys @jamesgeorge007 @anwarulislam 😉

<!-- gh-comment-id:3662747849 --> @AaronFortG commented on GitHub (Dec 16, 2025): I just did a PR fixing this issue (#5701), feel free to check it out and let me know guys @jamesgeorge007 @anwarulislam 😉
Author
Owner

@jamesgeorge007 commented on GitHub (Dec 22, 2025):

This is now addressed in the v2025.12.0 release.

<!-- gh-comment-id:3681590135 --> @jamesgeorge007 commented on GitHub (Dec 22, 2025): This is now addressed in the [v2025.12.0](https://github.com/hoppscotch/hoppscotch/releases/tag/2025.12.0) release.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/hoppscotch#2210
No description provided.