# BETA release for OAuth2 feature of API Testing

**URL:** <https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993>\
**Category:** Miscellaneous\
**Tags:** beta-release, katalon-studio\
**Created:** [January 21, 2019, 5:38am UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993 "2019-01-21T05:38:12Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![YoungNgo](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/youngngo/32/15132_2.png) [@YoungNgo](https://forum.katalon.com/u/YoungNgo)\
**Post date:** [January 21, 2019, 5:38am UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/1 "2019-01-21T05:38:12Z")

</div>

Dear guys,

Please help try out the following Katalon Studio BETA packages for the new OAuth2 feature of API Testing:

- MacOS
  - [https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon+Studio.dmg](https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon+Studio.dmg)

- Linux
  - [https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon\_Studio\_Linux\_32.tar.gz](https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon_Studio_Linux_32.tar.gz)
  - [https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon\_Studio\_Linux\_64.tar.gz](https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon_Studio_Linux_64.tar.gz)

- Windows:
  - [https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon\_Studio\_Windows\_32.zip](https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon_Studio_Windows_32.zip)
  - [https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon\_Studio\_Windows\_64.zip](https://s3.amazonaws.com/katalon/release-beta/5.11.0/Katalon_Studio_Windows_64.zip)

Please also find the draft document of the OAuth2 feature here: [http://docs-staging.katalon.com/DA-staging/katalon-studio/docs/authorization-oauth2.html#oauth-20](http://docs-staging.katalon.com/DA-staging/katalon-studio/docs/authorization-oauth2.html#oauth-20)

Feel free to give us your feedback in this same thread.

Best regards,  
Katalon Team

---

<div class="post-metadata">

**Author:** ![YoungNgo](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/youngngo/32/15132_2.png) [@YoungNgo](https://forum.katalon.com/u/YoungNgo)\
**Post date:** [January 21, 2019, 5:38am UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/2 "2019-01-21T05:38:31Z")

</div>



---

<div class="post-metadata">

**Author:** ![Justin\_Harper](https://avatars.discourse-cdn.com/v4/letter/j/f6c823/32.png) [@Justin\_Harper](https://forum.katalon.com/u/Justin_Harper)\
**Post date:** [January 23, 2019, 9:19am UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/3 "2019-01-23T09:19:27Z")

</div>

Hi @YoungNgo,  
First of all thank you very much for you work!

We are currently trying to get the OAUTH 2.0 authorisation working but the Bearer token we are receiving does not seem to be valid.

When authorising we need to supply client\_id, resource, response\_type and when getting token we supply grant\_type, client\_id, code.  
Could you tell us what maps to where? Or how we might add these to the requests.

Many thanks,  
Justin

---

<div class="post-metadata">

**Author:** ![ThanhTo](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/thanhto/32/697_2.png) [@ThanhTo](https://forum.katalon.com/u/ThanhTo)\
**Post date:** [January 23, 2019, 12:37pm UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/4 "2019-01-23T12:37:25Z")

</div>

Hu @Justin_Harper,

Do you mean that you received a token successfully but you can’t send a request, or that you cannot receive any token ?

Also you need client\_id AND client\_secret among other attributes for most of the flows. Another possible explanation is that some request needs an extra HTTP header for Client-id in which case you must manually add them, like the following image in our documentation.

 ![](https://europe1.discourse-cdn.com/katalon/original/2X/e/e7588963d4ccdaec7c1e294ef1825437718d2caa.png)

Pictures of what you are currently doing will be very helpful in helping us resolve this issue.

Have a nice day !

---

<div class="post-metadata">

**Author:** ![duyluong](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/duyluong/32/1116_2.png) [@duyluong](https://forum.katalon.com/u/duyluong)\
**Post date:** [January 23, 2019, 2:15pm UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/5 "2019-01-23T14:15:47Z")

</div>

@ThanhTo,

Please censor your credentials

---

<div class="post-metadata">

**Author:** ![Justin\_Harper](https://avatars.discourse-cdn.com/v4/letter/j/f6c823/32.png) [@Justin\_Harper](https://forum.katalon.com/u/Justin_Harper)\
**Post date:** [January 23, 2019, 2:39pm UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/6 "2019-01-23T14:39:37Z")

</div>

Hi @ThanhTo,

We do seem to get past authentication, however when we look at the token it doesn’t contain the relevant claims. At this moment in time I can only presume it’s due to when we do authentication in the app we pass through the extra data (in the url) e.g. resource. Which I’m now sure where I can put this to enable this to pass through.

Any pointers would be good, or if you have a link to source code file I might be able to reverse engineer it for our needs.

Thanks,  
Justin

---

<div class="post-metadata">

**Author:** ![ThanhTo](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/thanhto/32/697_2.png) [@ThanhTo](https://forum.katalon.com/u/ThanhTo)\
**Post date:** [January 23, 2019, 3:09pm UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/7 "2019-01-23T15:09:25Z")

</div>

Hi @Justin_Harper

I still have some uncertainties, though I can only guess that the extra data wasn’t allowed to pass but is crucial to the success of your test. To make it more clear, may I see some references (or documentations) to the type of extra data ( e.g resource isn’t it ?) that you’re using ?  
Perhaps some examples to what you’re trying to achieve ?

Thanks !

---

<div class="post-metadata">

**Author:** ![Ryan\_Manns](https://avatars.discourse-cdn.com/v4/letter/r/eada6e/32.png) [@Ryan\_Manns](https://forum.katalon.com/u/Ryan_Manns)\
**Post date:** [February 8, 2019, 12:51pm UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/8 "2019-02-08T12:51:31Z")

</div>

I don’t see a field for ‘Client ID’. Can you add that? Also can you expand the height of the panel so you don’t have to scroll to see all of the fields? See screenshot:

 ![image](https://europe1.discourse-cdn.com/katalon/original/2X/f/f2fbe0a1fdcfd50d67a0b0d19d005e687eb327fa.png)

---

<div class="post-metadata">

**Author:** ![Ryan\_Manns](https://avatars.discourse-cdn.com/v4/letter/r/eada6e/32.png) [@Ryan\_Manns](https://forum.katalon.com/u/Ryan_Manns)\
**Post date:** [February 8, 2019, 2:39pm UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/9 "2019-02-08T14:39:44Z")

</div>

Will you add ‘Implicit’ as a possible Grant Type? It would be nice to support Implicit Flow to test websites that use it.

---

<div class="post-metadata">

**Author:** ![YoungNgo](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/youngngo/32/15132_2.png) [@YoungNgo](https://forum.katalon.com/u/YoungNgo)\
**Post date:** [February 12, 2019, 5:03am UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/10 "2019-02-12T05:03:56Z")

</div>

Dear @Ryan_Manns,

Thanks for getting back to us. We’ll push your requests to our implementation list.

Best regards,

---

<div class="post-metadata">

**Author:** ![amohuanna](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/amohuanna/32/8648_2.png) [@amohuanna](https://forum.katalon.com/u/amohuanna)\
**Post date:** [February 20, 2019, 9:05pm UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/11 "2019-02-20T21:05:17Z")

</div>

I have been testing Katalon Studio Version: 5.11.0 Build: 14 using OAuth 2.0 against Salesforce ws, so far, works perfect. I agree with Ryan\_Manns scroll needs to be solved.

---

<div class="post-metadata">

**Author:** ![pradeep.k](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/pradeep.k/32/16104_2.png) [@pradeep.k](https://forum.katalon.com/u/pradeep.k)\
**Post date:** [March 4, 2019, 6:54am UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/12 "2019-03-04T06:54:08Z")

</div>

Hi Team ,  
Still I am facing the problem with with AUTH 2.0 ,Access Token Key is not generated . can you provide all key values as like postman tools. Please update it .

---

<div class="post-metadata">

**Author:** ![YoungNgo](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/youngngo/32/15132_2.png) [@YoungNgo](https://forum.katalon.com/u/YoungNgo)\
**Post date:** [March 4, 2019, 9:33am UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/13 "2019-03-04T09:33:01Z")

</div>

Dear @pradeep.k,

Can you help post your issue in a new thread with more details for investigation?

Thanks and Best regards,

---

<div class="post-metadata">

**Author:** ![magno.kenmoti](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/magno.kenmoti/32/23869_2.png) [@magno.kenmoti](https://forum.katalon.com/u/magno.kenmoti)\
**Post date:** [April 2, 2019, 12:30pm UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/14 "2019-04-02T12:30:48Z")

</div>

Hi,  
I cant access the draft document

---

<div class="post-metadata">

**Author:** ![spullabhotla](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/spullabhotla/32/4200_2.png) [@spullabhotla](https://forum.katalon.com/u/spullabhotla)\
**Post date:** [August 6, 2019, 8:01pm UTC](https://forum.katalon.com/t/beta-release-for-oauth2-feature-of-api-testing/17993/15 "2019-08-06T20:01:54Z")

</div>

Hi,

I am using version: 6.2.2. I have tried the following way to set the token. However, it is not working.  
It is working on 5.10.1 with no authorization and there by if we set the authorization with the token, the test was successful. Please let me know if there is any other way to implement it.

It will be hard to use two different versions of the tool.

 ![image](https://europe1.discourse-cdn.com/katalon/original/2X/1/14deb40b5e0608d925aa7852dc3e4b01dc61e9c5.png)

The HTTP Header shows as below :

 ![image](https://europe1.discourse-cdn.com/katalon/original/2X/a/acc39c8160233b50376884620627b9c40801dad4.png)

Where am I going wrong, please let me know ?
