Authorize a request token and issue a verifier

GEThttps://api.testingapis.com/api/auth/oauth1/authorizeSign in to see this endpoint's URL

Authorize a request token and issue a verifier (step 2, auto-approved as user apibee).

Not signed: this is the page a user would open in a browser. When the request token's oauth_callback is an http(s) URL on localhost or 127.0.0.1 (any port) or a Postman callback, it redirects there with oauth_token and oauth_verifier. For oob or any other callback, the verifier is returned as JSON.

Next: POST /api/auth/oauth1/access_token, signed with the request token and its secret, plus oauth_verifier.Next: POST …, signed with the request token and its secret, plus oauth_verifier.

Parameters 1

Name	Type	Description
`oauth_token`required	query · string	The request token from POST /api/auth/oauth1/request_token.The request token from POST ….

Responses

200: Verifier returned as JSON: oob, or a callback that isn't allowlisted.
302: Redirect to the callback with oauth_token and oauth_verifier.
400: parameter_absent (no oauth_token), token_rejected (unknown token), token_expired, or token_used (already exchanged).

Example

Request

curl -X GET "https://api.testingapis.com/api/auth/oauth1/authorize?oauth_token={{oauth1RequestToken}}" \
  -H "X-TestingApis-Key: YOUR_API_KEY"

Response200 OK

{
  "oauth_token": "o1rt_6112c483e357a56ceb9ea6d5fc7bc9e31e89b4ae",
  "oauth_verifier": "o1v_21e0cb4ef8eae05c096e290e61fc38b236921b52",
  "user": "apibee",
  "callback": "oob",
  "message": "Authorized (out of band). Exchange the request token at POST /api/auth/oauth1/access_token with this oauth_verifier."
}

The parameters, request and response examples and the live Try it panel for this endpoint are for signed-in members. Accounts are free and take a few seconds to create.

Try itSign-in requiredUses your key

api.testingapis.com

curl 'https://api.testingapis.com/api/auth/oauth1/authorize?oauth_token=%7B%7Boauth1RequestToken%7D%7D' \
  -H 'X-TestingApis-Key: YOUR_API_KEY'

const res = await fetch("https://api.testingapis.com/api/auth/oauth1/authorize?oauth_token=%7B%7Boauth1RequestToken%7D%7D", {
  headers: {
    "X-TestingApis-Key": "YOUR_API_KEY",
  },
});
console.log(res.status, await res.text());

// The shape of the example response in the docs.
type ApiResponse = {
  oauth_token: string;
  oauth_verifier: string;
  user: string;
  callback: string;
  message: string;
};

const res = await fetch("https://api.testingapis.com/api/auth/oauth1/authorize?oauth_token=%7B%7Boauth1RequestToken%7D%7D", {
  headers: {
    "X-TestingApis-Key": "YOUR_API_KEY",
  },
});
const body = (await res.json()) as ApiResponse;
console.log(res.status, body);

import requests

res = requests.get(
    "https://api.testingapis.com/api/auth/oauth1/authorize?oauth_token=%7B%7Boauth1RequestToken%7D%7D",
    headers={
        "X-TestingApis-Key": "YOUR_API_KEY",
    },
)
print(res.status_code, res.text)

using var client = new HttpClient();
using var request = new HttpRequestMessage(HttpMethod.Get, "https://api.testingapis.com/api/auth/oauth1/authorize?oauth_token=%7B%7Boauth1RequestToken%7D%7D");
request.Headers.TryAddWithoutValidation("X-TestingApis-Key", "YOUR_API_KEY");
using var response = await client.SendAsync(request);
Console.WriteLine($"{(int)response.StatusCode} {await response.Content.ReadAsStringAsync()}");

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpClient client = HttpClient.newHttpClient();
        HttpRequest request = HttpRequest.newBuilder(URI.create("https://api.testingapis.com/api/auth/oauth1/authorize?oauth_token=%7B%7Boauth1RequestToken%7D%7D"))
                .header("X-TestingApis-Key", "YOUR_API_KEY")
                .GET()
                .build();
        HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
        System.out.println(response.statusCode() + " " + response.body());
    }
}

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.testingapis.com/api/auth/oauth1/authorize?oauth_token=%7B%7Boauth1RequestToken%7D%7D", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("X-TestingApis-Key", "YOUR_API_KEY")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(res.StatusCode, string(data))
}

OAuth 1.0a request token{{oauth1RequestToken}}

POST /api/auth/oauth1/request_token with oauth_callback=oob, then GET /api/auth/oauth1/authorize. Each request token can be exchanged once, so get a new one after that.

GEThttps://api.testingapis.com/api/auth/oauth1/authorize?oauth_token=%7B%7Boauth1RequestToken%7D%7D

Query

oauth_tokenrequiredstring

Authorize a request token and issue a verifier

Parameters 1

Responses

Example

Related