OAuth 2.0
OAuth 2.0: an in-memory authorization server for testing client flows. Supports the authorization code grant with PKCE, client credentials, password and refresh token grants, plus a protected resource, userinfo, introspection (RFC 7662) and revocation (RFC 7009). Authorization is auto-approved as user apibee.
Your account unlocks these endpoints. Try it on each endpoint's page sends your key for you; from your own code, send a key from your API keys page in the X-TestingApis-Key header.
These endpoints need a free account. Create one or sign in to see their details and try them here.
- GET
https://api.testingapis.com/api/auth/oauth/authorizeStart the authorization code flow and issue a codeStart the authorization code flow and issue a code (auto-approved as user apibee). - POST
https://api.testingapis.com/api/auth/oauth/introspectReport whether a token is activeReport whether a token is active (RFC 7662). - GET
https://api.testingapis.com/api/auth/oauth/protectedReturn a resource that requires an OAuth access tokenReturn a resource that requires an OAuth access token. - POST
https://api.testingapis.com/api/auth/oauth/revokeRevoke an access or refresh tokenRevoke an access or refresh token (RFC 7009). - POST
https://api.testingapis.com/api/auth/oauth/tokenExchange a grant for an access tokenExchange a grant for an access token. - GET
https://api.testingapis.com/api/auth/oauth/userinfoReturn the profile of the user behind an access tokenReturn the profile of the user behind an access token.
Example request
Start the authorization code flow and issue a code (auto-approved as user apibee). Full reference and a Send button.
curl -X GET "https://api.testingapis.com/api/auth/oauth/authorize?response_type=code&client_id=apibee-public&redirect_uri=http://localhost:3000/callback&state=xyz&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM&code_challenge_method=S256" \
-H "X-TestingApis-Key: YOUR_API_KEY"Sign in to see the details
The parameters, request and response examples and the live Try it panel for these endpoints are for signed-in members. Accounts are free and take a few seconds to create.