An easy-to-host PDS on the ATProtocol, MacOS. Grandma-approved.

docs(bruno): add oauth/token authorization_code and refresh_token entries (seq 15, 16)

+55
+29
bruno/oauth_token_authorization_code.bru
··· 1 + meta { 2 + name: OAuth Token — Authorization Code Exchange 3 + type: http 4 + seq: 15 5 + } 6 + 7 + post { 8 + url: {{baseUrl}}/oauth/token 9 + body: formUrlEncoded 10 + auth: none 11 + } 12 + 13 + headers { 14 + DPoP: {{dpopProof}} 15 + } 16 + 17 + body:form-urlencoded { 18 + grant_type: authorization_code 19 + code: {{authCode}} 20 + redirect_uri: https://app.example.com/callback 21 + client_id: https://app.example.com/client-metadata.json 22 + code_verifier: {{codeVerifier}} 23 + } 24 + 25 + vars:pre-request { 26 + dpopProof: <replace-with-dpop-proof-jwt> 27 + authCode: <replace-with-authorization-code> 28 + codeVerifier: <replace-with-pkce-code-verifier> 29 + }
+26
bruno/oauth_token_refresh.bru
··· 1 + meta { 2 + name: OAuth Token — Refresh Token Rotation 3 + type: http 4 + seq: 16 5 + } 6 + 7 + post { 8 + url: {{baseUrl}}/oauth/token 9 + body: formUrlEncoded 10 + auth: none 11 + } 12 + 13 + headers { 14 + DPoP: {{dpopProof}} 15 + } 16 + 17 + body:form-urlencoded { 18 + grant_type: refresh_token 19 + refresh_token: {{refreshToken}} 20 + client_id: https://app.example.com/client-metadata.json 21 + } 22 + 23 + vars:pre-request { 24 + dpopProof: <replace-with-dpop-proof-jwt> 25 + refreshToken: <replace-with-refresh-token> 26 + }