Auth: OAuth 2.0 #1003

helloanoop · 2023-11-20T19:12:10Z

Parent Issue: #119

Latest Update: 28 Nov 2024 See #1003 (comment)

Support OAuth 2.0

Related Issues

Issues Related to current oauth flow

Issues related to client credentials

Other related issues:

fuxx · 2023-11-20T22:49:23Z

Really important feature <3

and-rose · 2023-12-02T13:19:23Z

So far this is the only thing keeping me attached to Postman. Really keen to see this implemented.

rjhofstee · 2023-12-05T16:04:34Z

We would love to move to Bruno as well, but since we are requiring grant_type=authorization_code we can't yet. Is there maybe a progress update on this feature? 🙌

tsteckenborn · 2023-12-10T19:07:33Z

Dependend on what you need you might want to check this as a workaround for e.g. the Client Credentials flow.

@Rens660 - I've got quite a similar one for Authorization Code. You'll need to do one manual step in the browser, but atleast it returns e.g. the corresponding link as part of an error message. Would you be interested in that?

rjhofstee · 2023-12-11T11:48:43Z

Hi @tsteckenborn,
Unfortunately I am stuck with using Authorization Code, but if you would share your workaround for if, I am definitely interested, thanks!

helloanoop · 2023-12-11T12:26:12Z

I will be building OAuth 2.0 functionality in this upcoming live coding stream with Hussain on Dec 16th
https://www.youtube.com/watch?v=ZtNGbglTjps

tsteckenborn · 2023-12-13T05:59:14Z

Hi @tsteckenborn, Unfortunately I am stuck with using Authorization Code, but if you would share your workaround for if, I am definitely interested, thanks!

Take a look if that helps to ease the usage

42shadow42 · 2023-12-19T18:50:44Z

Pretty much the only thing tying me to insomnia. We use the implicit flow on our end.

mjschlosser8 · 2023-12-19T23:37:54Z

Can't wait for this!

andifalk · 2024-01-09T10:29:24Z

Pretty much the only thing tying me to insomnia. We use the implicit flow on our end.

FYI: Implicit flow is deprecated, should not be used any more (replaced by Authorization code + PKCE)

42shadow42 · 2024-01-09T23:01:20Z

Pretty much the only thing tying me to insomnia. We use the implicit flow on our end.

FYI: Implicit flow is deprecated, should not be used any more (replaced by Authorization code + PKCE)

Thanks for the heads up, though I don't see Authorization code + PKCE supported here yet either. I'll have to check to see if we have migration plans from Implicit flow.

billbrinck · 2024-01-11T09:19:40Z

Is there any progress on the OAuth2 support?

fuxx · 2024-01-11T09:22:50Z

Is there any progress on the OAuth2 support?

@helloanoop can you give any news on your progress or estimation when you continue on OAuth 2 support? The past weeks were very quiet around OAuth 2 😢

helloanoop · 2024-01-11T09:39:49Z

@fuxx

Thanks for your patience.

I was a bit tied up in working on the lang improvements that will be needed to unblock some other features in the pipeline. Given the immense pain point and upvotes on this feature, I will spend some time on this week on this ticket and will share some updates towards the end of this week.

fuxx · 2024-02-01T10:54:37Z

Hej @helloanoop :)

Some weeks passed by and i guess the implementation could be more complicated then expected. Have you gained more insights on how you can proceed?

helloanoop · 2024-02-01T11:31:13Z

Hey @fuxx Appreciate your patience.

A big blocker was the Bru Lang design which I wanted to complete. This was very important to ensure that we have a way forward to introduce more features in the future and seamlessly allow folks to migrate to the new format (expected to be available by end of Feb)

Now there are two things in my pipeline

File Uploads - expected to be launched this week
OAuth 2.0 - expected to launched by next week

I am not touching any other feature (except critical bugs) unless above 2 are launched.

glitchracer · 2024-02-19T11:17:07Z

Any news about OAuth 2.0 support?

…s, authorization code, client credentials

…rization code, client credentials (#1654) * feat(#1003): oauth2 support Co-authored-by: lohit-1 <[email protected]>

helloanoop · 2024-02-26T20:52:41Z

We're on the verge of completing OAuth2 integration, just polishing up the last details.
Set to release tomorrow.

…alue issue fix

…word credentials grant types -- missing client id & secret for password grant type (usebruno#2051) * fix(usebruno#1003): content type for client_credentials & password grant types * feature(usebruno#1003): added client is & secret for password credentials grant type

…from preferences when accessing Auth and Token URLs (usebruno#2071) usebruno#1684 usebruno#1003

…aracter from the response body (#2346) * fix(#1003): content type for client_credentials & password grant types * feature(#1003): added client is & secret for password credentials grant type * fix: filter out non-printable control character and ZWNBSP character * fix: filter out non-printable control character and ZWNBSP character

…t parse logic (#2351) * fix(#1003): content type for client_credentials & password grant types * feature(#1003): added client is & secret for password credentials grant type * fix: filter out non-printable control character and ZWNBSP character * fix: filter out non-printable control character and ZWNBSP character * remove ZWNBSP character from response body --------- Co-authored-by: Anoop M D <[email protected]>

… Encode of Client ID usebruno#2115 usebruno#1003

kkevindev · 2024-05-31T07:47:24Z

@helloanoop would it be possible for the Oauth2 implementation in Bruno to send extra headers/body request parameters. For example: we use Auth0 and we require a "organisation" request parameter to be send to the Oauth2 authentication endpoint. Currently, there is no functionality to send anything extra with the request.

… Encode of Client ID usebruno#2115 usebruno#1003

pascalknupper · 2024-07-25T06:54:13Z

Is there any update on this topic, can´t wait to see OAuth 2 auth flow without scripting in Bruno 🙂

… Encode of Client ID (#2129) #2115 #1003

…from preferences when accessing Auth and Token URLs (usebruno#2071) usebruno#1684 usebruno#1003

…aracter from the response body (usebruno#2346) * fix(usebruno#1003): content type for client_credentials & password grant types * feature(usebruno#1003): added client is & secret for password credentials grant type * fix: filter out non-printable control character and ZWNBSP character * fix: filter out non-printable control character and ZWNBSP character

…t parse logic (usebruno#2351) * fix(usebruno#1003): content type for client_credentials & password grant types * feature(usebruno#1003): added client is & secret for password credentials grant type * fix: filter out non-printable control character and ZWNBSP character * fix: filter out non-printable control character and ZWNBSP character * remove ZWNBSP character from response body --------- Co-authored-by: Anoop M D <[email protected]>

… Encode of Client ID (usebruno#2129) usebruno#2115 usebruno#1003

StefanTUI · 2024-08-28T07:52:52Z

Bruno is great! And I'd also love to see the OAuth2 auth flow (grant type client credentials) completed, so I fully recommend it everywhere I can :-)

helloanoop · 2024-11-28T12:53:01Z

Hey everyone,

Thanks for all the feedback around improvements on the OAuth2 implementation. We know this has been on the wishlist for a while, and we’re finally diving into a full revamp of the OAuth2 flow. We’re aiming to wrap this up by end of December and will keep you posted here as we make progress.

As part of this process, we’re forming a cohort to better understand how you use OAuth2 in Bruno and gather insights into your expectations. If you’d like to join, please fill out this form: https://forms.gle/gicLNdt5F1XD1MBq7
In the discussions, we'd like to know and understand

How you’re currently using OAuth2 in Bruno.
Any challenges or limitations you’ve faced with the current implementation.
Features or improvements you’d like to see in the revamped version.

We are also reviewing the PRs - #2164, #2077, #2058 as a part of this effort.

Thanks,
Bruno Team

JoniJnm · 2024-11-28T13:29:59Z

How can I fill out the form?

I only wanted to say: I don't know if it's possible, but I would like to be able to open an external browser (instead of in-app) during the oauth2 authorization_code to use the local cookies and do not need to login every time in the external provider. Thanks.

helloanoop · 2024-11-28T18:29:41Z

There was a permission issue in the cohort participation form. This has been fixed now.

tygore587 · 2024-11-28T19:04:57Z

How can I fill out the form?

I only wanted to say: I don't know if it's possible, but I would like to be able to open an external browser (instead of in-app) during the oauth2 authorization_code to use the local cookies and do not need to login every time in the external provider. Thanks.

Also a +1. We need to login with a device id in entra id. This device id is only send by edge or chrome with an extension and for this we need to login via an external browser.

Also it would be nice to do the authentication in the collection (like in postman). So i don't need to have 1 request that you need to run before you can run any other request in the collection. This is hard to understand for my team and it's the only reason nobody in my team uses the authentication with oauth2 in Bruno. Setting up oauth2 in the collection and running the auth request there is known to everybody and easier to understand for everyone.

JoniJnm · 2024-12-02T19:49:08Z

I created this ticket: #3584

caviyacht · 2025-01-10T19:25:47Z

I hope this comes out soon, I want to use Bruno (looks amazing) but am 100% reliant on the implicit grant flow. Any update as we're now in January?

shonigbaum · 2025-01-31T12:29:26Z

When is the OAuth 2.0 coming? Still getting a "invalid request" message when trying it:

bigsing · 2025-01-31T13:04:15Z

@shonigbaum Per the Bruno Discord posted on 1/28:

Some polish is pending.
Here is a experimental build if you want to play around https://github.com/usebruno/bruno-experimental-builds/releases/tag/oauth2-revamp-v1.39.0-2025.1.24

Core functionality is done. We need to provide a setting to automatically fetch the token.
Let us know if you encounter any issues in the above build and if you have feedback on what else needs to be improved.

hoping to put out a public beta during feb first week and then release it live on feb 3rd week.

abieler-sap · 2025-01-31T14:45:52Z

I tried the experimental build and got an error fetching a token. Is there a possibility to analyze what went wrong?
Is there a plan to add the token request also to the timeline, so a user can see what's happening in the token request?

helloanoop mentioned this issue Nov 20, 2023

API / Collection Authorization #119

Closed

8 tasks

helloanoop pushed a commit that referenced this issue Dec 17, 2023

feat(#1003): oauth 2.0 client credentials

5649f7c

lohxt1 pushed a commit to lohxt1/bruno that referenced this issue Feb 23, 2024

feat(usebruno#1003): oauth2 support - resourceOwnerPasswordCredential…

c690363

…s, authorization code, client credentials

lohxt1 pushed a commit to lohxt1/bruno that referenced this issue Feb 23, 2024

feat(usebruno#1003): updated bru files

2248611

lohxt1 pushed a commit to lohxt1/bruno that referenced this issue Feb 23, 2024

feat(usebruno#1003): oauth2 support

87d21ef

lohxt1 pushed a commit to lohxt1/bruno that referenced this issue Feb 23, 2024

feat(usebruno#1003): bru files cleanup

1802cf7

lohxt1 pushed a commit to lohxt1/bruno that referenced this issue Feb 23, 2024

feat(usebruno#1003): bru files cleanup

c8b9272

lohxt1 pushed a commit to lohxt1/bruno that referenced this issue Feb 23, 2024

feat(usebruno#1003): created collection_oauth2 collection

9e1e5f1

helloanoop pushed a commit that referenced this issue Feb 26, 2024

feat(#1003): oauth2 support - resourceOwnerPasswordCredentials, autho…

9f81e6d

…rization code, client credentials (#1654) * feat(#1003): oauth2 support Co-authored-by: lohit-1 <[email protected]>

lohxt1 added a commit to lohxt1/bruno that referenced this issue Feb 27, 2024

feat(usebruno#1003): oauth2 code cleanup, styling fixes..

0fd255c

lohxt1 added a commit to lohxt1/bruno that referenced this issue Feb 27, 2024

feat(usebruno#1003): styling fixes for auth input fields, undefined v…

244f8ba

…alue issue fix

lohxt1 added a commit to lohxt1/bruno that referenced this issue Feb 27, 2024

feat(usebruno#1003): auth mode dropdown order

dd2b524

lizziemac pushed a commit to lizziemac/bruno that referenced this issue May 4, 2024

fix: Oauth2: Reuse TLS Certifcate valiadation and custom CA settings …

781d76c

…from preferences when accessing Auth and Token URLs (usebruno#2071) usebruno#1684 usebruno#1003

pietrygamat added a commit to pietrygamat/bruno that referenced this issue May 22, 2024

Fix: OAuth 2.0 Grant Type Authorization: "invalid_client" error / URL…

003a017

… Encode of Client ID usebruno#2115 usebruno#1003

gousse mentioned this issue May 23, 2024

fix: Check OAuth2 redirect URL for matching callback URL and authorization code in query parameters #2148

Merged

5 tasks

pietrygamat added a commit to pietrygamat/bruno that referenced this issue Jun 2, 2024

Fix: OAuth 2.0 Grant Type Authorization: "invalid_client" error / URL…

30e80b4

… Encode of Client ID usebruno#2115 usebruno#1003

pietrygamat added a commit to pietrygamat/bruno that referenced this issue Jun 5, 2024

Fix: OAuth 2.0 Grant Type Authorization: "invalid_client" error / URL…

bacbd04

… Encode of Client ID usebruno#2115 usebruno#1003

pietrygamat added a commit to pietrygamat/bruno that referenced this issue Jun 21, 2024

Fix: OAuth 2.0 Grant Type Authorization: "invalid_client" error / URL…

ca51d06

… Encode of Client ID usebruno#2115 usebruno#1003

pietrygamat added a commit to pietrygamat/bruno that referenced this issue Jul 2, 2024

Fix: OAuth 2.0 Grant Type Authorization: "invalid_client" error / URL…

8b1132b

… Encode of Client ID usebruno#2115 usebruno#1003

pietrygamat added a commit to pietrygamat/bruno that referenced this issue Jul 15, 2024

Fix: OAuth 2.0 Grant Type Authorization: "invalid_client" error / URL…

7f59f7e

… Encode of Client ID usebruno#2115 usebruno#1003

pietrygamat added a commit to pietrygamat/bruno that referenced this issue Jul 19, 2024

Fix: OAuth 2.0 Grant Type Authorization: "invalid_client" error / URL…

dd931c8

… Encode of Client ID usebruno#2115 usebruno#1003

lohxt1 pushed a commit that referenced this issue Jul 26, 2024

Fix: OAuth 2.0 Grant Type Authorization: "invalid_client" error / URL…

f2ba351

… Encode of Client ID (#2129) #2115 #1003

jwetzell pushed a commit to jwetzell/bruno that referenced this issue Aug 2, 2024

fix: Oauth2: Reuse TLS Certifcate valiadation and custom CA settings …

faa9ece

…from preferences when accessing Auth and Token URLs (usebruno#2071) usebruno#1684 usebruno#1003

jwetzell pushed a commit to jwetzell/bruno that referenced this issue Aug 2, 2024

Fix: OAuth 2.0 Grant Type Authorization: "invalid_client" error / URL…

d2db2b0

… Encode of Client ID (usebruno#2129) usebruno#2115 usebruno#1003

anusree-bruno added the module-oauth2 label Nov 23, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Auth: OAuth 2.0 #1003

Auth: OAuth 2.0 #1003

helloanoop commented Nov 20, 2023 •

edited

Loading

fuxx commented Nov 20, 2023

and-rose commented Dec 2, 2023

rjhofstee commented Dec 5, 2023

tsteckenborn commented Dec 10, 2023

rjhofstee commented Dec 11, 2023

helloanoop commented Dec 11, 2023

tsteckenborn commented Dec 13, 2023

42shadow42 commented Dec 19, 2023

mjschlosser8 commented Dec 19, 2023

andifalk commented Jan 9, 2024

42shadow42 commented Jan 9, 2024

billbrinck commented Jan 11, 2024

fuxx commented Jan 11, 2024

helloanoop commented Jan 11, 2024

fuxx commented Feb 1, 2024

helloanoop commented Feb 1, 2024

glitchracer commented Feb 19, 2024

helloanoop commented Feb 26, 2024

kkevindev commented May 31, 2024 •

edited

Loading

pascalknupper commented Jul 25, 2024

StefanTUI commented Aug 28, 2024

helloanoop commented Nov 28, 2024

JoniJnm commented Nov 28, 2024 •

edited

Loading

helloanoop commented Nov 28, 2024

tygore587 commented Nov 28, 2024 •

edited

Loading

JoniJnm commented Dec 2, 2024

caviyacht commented Jan 10, 2025

shonigbaum commented Jan 31, 2025

bigsing commented Jan 31, 2025

abieler-sap commented Jan 31, 2025 •

edited

Loading

Auth: OAuth 2.0 #1003

Auth: OAuth 2.0 #1003

Comments

helloanoop commented Nov 20, 2023 • edited Loading

fuxx commented Nov 20, 2023

and-rose commented Dec 2, 2023

rjhofstee commented Dec 5, 2023

tsteckenborn commented Dec 10, 2023

rjhofstee commented Dec 11, 2023

helloanoop commented Dec 11, 2023

tsteckenborn commented Dec 13, 2023

42shadow42 commented Dec 19, 2023

mjschlosser8 commented Dec 19, 2023

andifalk commented Jan 9, 2024

42shadow42 commented Jan 9, 2024

billbrinck commented Jan 11, 2024

fuxx commented Jan 11, 2024

helloanoop commented Jan 11, 2024

fuxx commented Feb 1, 2024

helloanoop commented Feb 1, 2024

glitchracer commented Feb 19, 2024

helloanoop commented Feb 26, 2024

kkevindev commented May 31, 2024 • edited Loading

pascalknupper commented Jul 25, 2024

StefanTUI commented Aug 28, 2024

helloanoop commented Nov 28, 2024

JoniJnm commented Nov 28, 2024 • edited Loading

helloanoop commented Nov 28, 2024

tygore587 commented Nov 28, 2024 • edited Loading

JoniJnm commented Dec 2, 2024

caviyacht commented Jan 10, 2025

shonigbaum commented Jan 31, 2025

bigsing commented Jan 31, 2025

abieler-sap commented Jan 31, 2025 • edited Loading

helloanoop commented Nov 20, 2023 •

edited

Loading

kkevindev commented May 31, 2024 •

edited

Loading

JoniJnm commented Nov 28, 2024 •

edited

Loading

tygore587 commented Nov 28, 2024 •

edited

Loading

abieler-sap commented Jan 31, 2025 •

edited

Loading