The Authorization Code grant usually sends refresh tokens. Refresh tokens are unique in that they act as a sort of pseudo, permanent access token. Although you won’t access sensitive information with them, a refresh token is all you need to get more access tokens. Treat it like you would your password.
The following code snippet creates an OAuth token using the Authorization Code grant. Notice this requires Request Auth(), Client Secret(), and Redirect URL(). Remember, after you make the token once, you can remove everything but the User and Client ID from OAuthTokens.jmp.
token = New OAuth2 Token(
User( "Test User" ),
Client ID( "12ab" ),
Client Secret( "3456dEfG" ),
Request Auth(
Scope( "history" ),
Auth URL( "https://example.com/services/oauth2/authorize" ),
),
Redirect URL( "https://www.getpostman.com/oauth2/callback" ) ,
Token URL( "https://example.com/services/oauth2/token" )
);
Note: See your API documentation for more information about how to get values such as the client secret and token URL.
After you run this code once, clean it up and make it secure.
token = New OAuth2 Token(
User( "Test User" ),
Client ID( “12ab” ),
);
You might already be familiar with OAuth and have saved a refresh token to your script. The following snippet creates an OAuth token with that existing token.
token = New OAuth 2 Token (
User( "yourgoogleaccount@gmail.com" ),
Refresh Token( "1a2b3c4e5F" ),
Token URL( "https://www.example.com/oauth2/token" ),
Client ID( "12ab" ),
Client Secret( "3456dEfG" )
);
After you run this code once, clean it up and make it secure.
token = New OAuth2 Token(
User( "yourgoogleaccount@gmail.com" ),
Client ID( "12ab" )
);