OAuth 2.0 Authorization code grant using AWS Cognito and Postman

[@georgesmith9178]

Thank you - shows exactly what I needed in Postman. One suggestion - re-record the video with the new "Experience" from AWS. Sorry, they changed the UI ... AGAIN :). This will bring more views.

[@carloscontreraschavez4567]

thank you Ravi, very good explanation

[@georgesmith9178]

Great tutorial - gave you thumbs-up. Just one little detail that evaded me. On the diagram you showed the user clicking on a login link (top left), but then we seem to only simulate that click with postman, right? I don't think there was an actual link on a page that this end-user clicked. Thanks in advance for confirming.

[@alejopaullier5538]

Thanks for this video Raavi. I have a question: once you get the access tokens, should they be stored to invoke subsequent API calls? I have been using the implicit grant flow so far, and as far as i understand, after getting access tokens these are stored in the browser's cookies for later calls. It does not come clear to me what to do with these tokens in the authorization code grant flow. Thanks a lot!

[@raaviblog105]

access token in authorization code grant flow are received on backend channel and is considered quite safe flow. You can check this kzbin.info/www/bejne/b2qZgJybra2tm5I ... it is explained in detail how authorization code flow works. Hope this will answer your query.

[@RijalinaRout]

where did you get callback url??

[@raaviblog105]

You can find it in this link learning.postman.com/docs/sending-requests/authorization/ It is also displayed in postman field

[@farmersneed]

thank you, sir

[@banalas12]

Nice video. It helps a lot

[@raaviblog105]

Glad it helped