Identity Server 3 Token Request from POSTMAN Http Tool

Question

Using POSTMAN, I'm struggling to to retrieve my Identity Server 3 token.

Error code is : 400 Bad Request

Here are the details:

POST /identity/connect/token HTTP/1.1

Host: localhost:44358 Content-Type: application;x-www-form-urlencoded

Cache-Control: no-cache

Postman-Token: 57fc7aef-0006-81b2-8bf8-8d46b77d21d1

username=MYUSER-ID&password=MY-PASSWORD&grant_type=password&client_id=rzrwebguiangulajsclient&client_secret=myclientsecret&redirect_uri=https://localhost:44331/callback

I've done something similar with a simple Visual Studio 2015 WebApi project, where the end point was \token.

Any guidance/advice is appreciated...

regards, Bob

Answer 1

The minimum required for a Resource Owner OAuth request is the following (line breaks added for readability):

POST /connect/token

Header

Content-Type: application/x-www-form-urlencoded

Body

username=MYUSER-ID
&password=MY-PASSWORD
&grant_type=password
&client_id=rzrwebguiangulajsclient
&client_secret=myclientsecret
&scope=api

Off the bat you are not requesting a scope in your request. Otherwise there is most probably something wrong in the configuration of your client within Identity Server.

Your best bet would be to enable logging and look at what comes back when this request errors.

Update: also, please don't use the ROPC grant type