Skip to Content
Actions

PostMan capabilities

January 25, 2015 | 173 Views |
 postmanrestSecuritysecurity tales
Follow

Recently, a collegue of mine Ido Fishler shared a wonderful REST API tool to manage calls.

I would like to demonstrate some useful things you can do with it.

  • Manage Header Presets:

       You can store list of key-value strings to be added as headers.

     /wp-content/uploads/2015/01/header1_631236.png

     Then, you can decide which header preset to use next:

/wp-content/uploads/2015/01/header2_631237.png

  • Saving calls to a collection

        You can store a collection of HTTP REST calls and edit their names

/wp-content/uploads/2015/01/collection_631239.png

  • Manage environment

       Suppose you want to do the same call to different hosts.

       You can write the parameter in double braclet {{ param }} and then add a new key in the “manage environment” control.

/wp-content/uploads/2015/01/host_631242.png

     Add new enviornment and set his key-value parameters

/wp-content/uploads/2015/01/sapflp5_631241.png

   

     Here we can see all environments I set:

/wp-content/uploads/2015/01/envs_631240.png


  • Consecutive calls:

     Suppose you have GET call to receive a key and then a POST call with the same key from previous call.

   

     you can do the following:

   

     in this example you can see a GET call with a parameter {{host}}

get csrf.png

     now, pay attention to the {{X-CSRF-Token}} parameter, it will contain the same value from the previous GET call.

/wp-content/uploads/2015/01/post_631243.png

To report this post you need to login first.

2 Comments

You must be Logged on to comment or reply to a post.

  1. Supriya Sahu

    Hi Gilad,

    First all, Thanks a lot for such a wonderful explanation.

    I am stuck in a “post” cal for .xsodata service (to create a record).

    First I made a get call to xsodata to fetch x-csrr-token.(PFB image)

    To create a record I make a “POST” request, with the environment variable i.e fetched token enabled (in header section) . Body Containing data to be created. PFB screenshot

    But, when I send the request , I get an error – 405 Method not allowed.(PFB image)

     

    Please help me understand how to pass the fetched token to a “POST” request.

    Do i need to make any changes in the URL or add params? I have tried all my ways but still no luck.

    I have also attached my .xsaccess and .xsodata file below.

     

    Thanks in advance for the help.

    Regards,

    Supriya Sahu

     

     

    (0) 
  2. Gilad Keinan Post author

    Hi,

     

    1. For security reasons please remove the screenshot where anyone can see your authorization string. anyone could decode it and see the user and password.
    2. 405 Method not allowed means your server is not supporting this signature (HTTP method, payload, request params). you can start by creating a simple POST without any parameters and test if you can call it from postman. than start by adding more params.
    (0) 

Leave a Reply