What is an OAuth Token?
An OAuth token is a temporary, secure credential issued through the OAuth 2.0 authorisation framework. It enables applications to access APIs or protected resources without exposing usernames or passwords.
The token is included in API requests by a third-party application, allowing the server to verify that the request is authorised and grant access to the permitted resources without exposing usernames or passwords.
OAuth tokens are widely used in integrations, mobile apps, cloud platforms, and enterprise APIs to enable controlled, secure communication between systems.
System Requirements
Tool | Description |
API Client Tool | A tool used to send API requests and obtain authentication tokens. Any API client can be used for this process. |
Generate an OAuth Token
NOTE: This article will demonstrate the process using Postman.
In the Postman application, click Authorisation.
Click the Auth Type dropdown.
Select OAuth 2.0.
Under Configure New Token, enter the required fields.
For information on field definitions, check Configure New token- Fields.
Click Get new access token.
In the pop-up window, enter your email and password
Alternatively, select Use Single Sign‑On (SSO) if your organisation uses SSO authentication.
After successful authentication, the MANAGE ACCESS TOKENS pop-up will appear and display the generated OAuth Token.
TIP: If the Postman redirection dialogue doesn't redirect automatically, click Proceed.
Configure New Token- Fields
Field | Description |
Token Name | Name used to identify this token. |
Callback URL | Pre-registered redirect URL used after authentication. |
Auth URL | Authorisation endpoint provided by your OAuth service. |
Access Token URL | Token endpoint to request the OAuth token. |
Client ID | Issued client identifier. |
Client Secret | Issued client secret. |
EXAMPLE: Examples of Auth URL and Access Token URL:
QA
Auth Token URL: https://oauthqa.asite.com/oauth/token
Live
Auth URL: https://oauth.asite.com/oauth/authorize
Auth Token URL: https://oauth.asite.com/oauth/token