OAuth 1.0 Authorization Flow using Flickr and Postman

Поделиться
HTML-код
  • Опубликовано: 7 фев 2025

Комментарии • 65

  • @vdespa
    @vdespa  4 года назад

    👉 Want to learn more about Postman? Check my Postman online course.
    www.udemy.com/course/postman-the-complete-guide/?referralCode=4E8B90BA4B5EE8DA9237

    • @vdespa
      @vdespa  3 года назад

      @@oliverjohnny1173 great job 👍

  • @cyndicorinne
    @cyndicorinne 3 года назад +7

    This tutorial was very helpful to finally get access to Flickr API. Also, in the new version of Postman, under Authorization, you can now add the callback URL. It won't work if you put it in params, in the newest version of Postman.

    • @vdespa
      @vdespa  3 года назад +1

      I am glad it helped. Thanks for sharing the issue with the callback url.

    • @lc6631
      @lc6631 Год назад +1

      I was stuck. Then read your comment and got going! thank you so much!

    • @rchtchauhan
      @rchtchauhan Год назад +1

      thanks ..I was stuck glad read your comment

  • @tula1308
    @tula1308 3 года назад +1

    I'm working on get api from Flickr and trusly I have no idea until this vid. Thank you so much

    • @vdespa
      @vdespa  3 года назад

      I am glad this helped!

  • @bspinnfade
    @bspinnfade 4 года назад +2

    Thanks for showing this Valentin I was in desperation when I saw the flickr API was OAuth 1.0 as I'm much more familiar with OAuth 2.0 and Open ID Connect :)

    • @vdespa
      @vdespa  4 года назад

      Happy to help.

  • @giancarlo5433
    @giancarlo5433 4 года назад +3

    You are a lifesaver!! I wish I could give you more than 1 like

    • @vdespa
      @vdespa  4 года назад

      Thank you! You can watch and like my other videos :P and subscribe :)

  • @smeeegheeeed1
    @smeeegheeeed1 2 года назад +1

    Fantastic video - thank you!

    • @vdespa
      @vdespa  2 года назад

      Glad you enjoyed it!

  • @HerrThomasE
    @HerrThomasE 2 месяца назад

    Thank you very much !!!

    • @vdespa
      @vdespa  2 месяца назад

      You are welcome. Thank you for leaving a comment.

  • @alexanderhatley5230
    @alexanderhatley5230 3 года назад +2

    You can avoid a nasty error Status: 401 Unauthorized oauth_problem=signature_invalid.
    To do this, select Add authorization data to: Request Headers in Authorization.

    • @vdespa
      @vdespa  3 года назад

      Thanks for sharing

    • @nizamitagiyev705
      @nizamitagiyev705 2 года назад

      I changed Add authorization data to: Request Headers. But still have 401Unauthorized oauth_problem=verifier_invalid when trying to get access_token. What else can affect on that?

  • @aadarshafime7900
    @aadarshafime7900 3 года назад +2

    In oauth_callback value example.com is not working. I tried several times. Any solution?

    • @roberto200able
      @roberto200able 3 года назад +5

      authorization -> advenced -> Callback URL -> www.example.com

    • @cosmelvillalobos6448
      @cosmelvillalobos6448 3 года назад +1

      @@roberto200able i had the same error man , i was going crazy but saw your answer and now it works fine

    • @minoliisurika3899
      @minoliisurika3899 3 года назад

      @@roberto200able where can i find that authorization -> advenced -> Callback URL

    • @roberto200able
      @roberto200able 3 года назад

      @@minoliisurika3899 its in the config of the postman call i dont remember the exaclty place

  • @akashyourbuddy
    @akashyourbuddy 3 года назад

    Thank you.

    • @vdespa
      @vdespa  3 года назад

      You're welcome!

  • @saadaltwaim9672
    @saadaltwaim9672 3 года назад

    thank you for this tutorial
    nice & easy
    i have question
    i want to use Flickr for swift Development what should write in Callback URL

    • @vdespa
      @vdespa  3 года назад

      You need a public callback url that redirects to your app.

  • @gafger9989
    @gafger9989 2 года назад

    Las nuevas versiones de postman cuentan con los parámetros de verifier para utilizarlos no es necesario crearlo en paremetros

  • @rajeshbabu435
    @rajeshbabu435 2 года назад

    Hi, Will it work with ReactJS?

  • @cyndicorinne
    @cyndicorinne 3 года назад

    Question: how does postman generate the extra OAuth 1.0 parameters, if I were to implement my own code?

    • @vdespa
      @vdespa  3 года назад +1

      Since OAuth is a standard, I don't see why you would need extra params. However, you can manually add query params.

  • @raghadsalameh3564
    @raghadsalameh3564 4 года назад +1

    Hi, thanks for your effort. I have a question... Is it Possible to call an API within the Pre-request script synchronously? I need to set the environment variable token from that request then use it in the main request. Is it possible to do that or I need to chain the requests?
    I found pm.sendRequest but it's async

    • @vdespa
      @vdespa  4 года назад +1

      Yes, you can. AFAIK the "main" request does not start until the pre-request script is done. You can set the variable in the callback. Let me know if this does not work.

  • @ishfaqbabar1192
    @ishfaqbabar1192 3 года назад

    i also need a same for LTI APIs. it also uses oauth v1 but its has some extra steps in my opinion. this API used for Learning management system to access course contents. Many LMS provider are using LTI .like canvas, Whiteboard ,pearson. ETC please make a video on it

  • @Draco1581
    @Draco1581 3 года назад +1

    Hey! good video help me a lot, but i stuck at Step 3- Exchanging the Request Token for an Access Token, do all like in your video, but i have respond "Status: 401 Unauthorized oauth_problem=verifier_invalid"

    • @vdespa
      @vdespa  3 года назад

      I am sorry. Are you using the API from the video?

    • @Draco1581
      @Draco1581 3 года назад

      @@vdespa yes

    • @dohuutufgwhn9059
      @dohuutufgwhn9059 3 года назад

      @@vdespa Me too. Now, I don't know how to fix this error. Does anyone have any ideas for me please?

    • @vdespa
      @vdespa  3 года назад

      @@dohuutufgwhn9059 Can you ask this on the Discord server?

    • @nizamitagiyev705
      @nizamitagiyev705 2 года назад

      Does anyone find solution how to fix it?

  • @HerrThomasE
    @HerrThomasE 2 месяца назад

    It is not really complicated. Complicated is, that flickr that not differ between request_token and access_token on there repsonses

  • @dsn3001
    @dsn3001 4 года назад

    Hi thanks for sharing this, it was really helpful. A question, say if I want to automate the user consent part within postman itself without manually opening a browser window - is this possible?

    • @vdespa
      @vdespa  4 года назад +1

      Postman can't help you with automating user interactions. Use Selenium or similar tools for that. Use Postman for APIs.

  • @salmankr2d2
    @salmankr2d2 4 года назад

    Hi, i want to upload a picture on flickr using the api, which token shall i use in the setToken function?
    I always get an error message saying you do not have permission.

    • @vdespa
      @vdespa  4 года назад

      It is hard to know what the problem is in this case. Join the Facebook community (see link in the description) and ask your question there. Consider adding more details, including screenshots. Thanks for understanding.

  • @maghilvannanm2415
    @maghilvannanm2415 4 года назад

    Iam getting CORS error while using in browser, so wanna know whether you're using desktop or browser

    • @vdespa
      @vdespa  4 года назад

      It is hard to know what the problem is in this case. Join the Facebook community (see link in the description) and ask your question there. Consider adding more details, including screenshots. Thanks for understanding.

    • @maghilvannanm2415
      @maghilvannanm2415 4 года назад

      @@vdespa it seems the problem lies in browser, browsers always throws CORS error. After getting desktop version it got fixed. Your video is one of the reason I'm gonna get selected for a internship, so thankyou

  • @murali783v
    @murali783v 4 года назад

    Hi, Thanks for the video! I have a question, Should I need to pass the application name in the header? (like application_name: my_app)

    • @vdespa
      @vdespa  4 года назад

      Thanks, I am glad it helped. Typically this is not needed, as the application is already identified.

  • @nancyfazal2536
    @nancyfazal2536 4 года назад

    Hi, thanks for the nice video. But I am stuck at some point while requesting token. Though, I have specified all the parameters still meeting this error constantly: oauth_problem=parameter_absent&oauth_parameters_absent=oauth_consumer_key%26oauth_signature%26oauth_signature_method%26oauth_nonce%26oauth_timestamp
    Any suggestions.

    • @vdespa
      @vdespa  4 года назад

      Check your request and make sure the parameters mentioned are being sent.

    • @nancyfazal2536
      @nancyfazal2536 4 года назад

      @@vdespa All the parameters are there, but now meeting this error: oauth_problem=signature_invalid

  • @stokitko
    @stokitko 3 года назад

    Why the Step 1 is needed? "When Your App first makes an API call for a request token.
    OAuth 2 doesn't have it and we can just simply redirect a user to the AS

    • @vdespa
      @vdespa  3 года назад

      OAuth1 is not the same as OAuth2.

    • @stokitko
      @stokitko 3 года назад

      @@vdespa off course, I just wondered what exactly the first step achieves

  • @ighsight
    @ighsight 3 года назад +2

    oauth sucks. Thanks for this great explainer video, I am slightly less confused now.

    • @vdespa
      @vdespa  3 года назад

      OAuth tried to solve a problem with the technology available. It is not perfect but it works.

    • @ighsight
      @ighsight 3 года назад

      @@vdespa I have seen it work, it is just hard to get there when starting from zero. i am much closer now, I have figured out for my use case that all I need to do is the signing implementation of Oauth 1.0. Do you know anywhere I can read up on implementing this inside AWS Lambda using Python? That is if you don't have any videos on that already.

    • @vdespa
      @vdespa  3 года назад

      @@ighsight unfortunately I don't. I am not even sure if AWS lambda is the best platform for this.

    • @ighsight
      @ighsight 3 года назад

      @@vdespa I am reaching that conclusion as well. I may have to set up a server on an EC2 instance to get this done. Obviously I am trying to avoid that complexity and stay serverless, as that is the setup for this app. I'm adding calls to a service to it that unfortunately still uses the older Oauth 1.0 with no option for 2.0. Before I go the server route I am first trying to understand how to get the requests set up correctly, which will need to be done regardless of what path I take- it will still be just creating and signing appropriate headers, no need for user interaction during the process. If you have any resources or videos on that use case please let me know. Thanks for your replies.

    • @vdespa
      @vdespa  3 года назад

      @@ighsight before deploying, focus on getting it to work locally