Is it possible to secure an api endpoint using OAu...

# ktor

[Sam]

Is it possible to secure an api endpoint using OAuth and Ktor? I’m trying to use Postman to call my endpoint but Kto keeps trying to redirect to my OAuth server to request a token. I have the Bearer token setup in Postman and it is sending it along in the POST request. Setup details in thread ->

[Sam]

My setup is installing an OAuth Authentication handler.

install(Authentication) {
        oauth {
            client = oauthHttpClient
            providerLookup = {
                OAuthServerSettings.OAuth2ServerSettings(
                    name = "myOAuthServer",
                    authorizeUrl = "<https://myoauthserver/auth>",
                    accessTokenUrl = "<https://myoauthserver/token>",
                    clientId = "myClientID",
                    clientSecret = ""
                )
            }
            urlProvider = { _ ->
                "/"
            }
        }
    }

In my route setup I have:

routing {
        authenticate {
            post("/submit") {
                ...
            }
        }
  }

What I’m seeing while debugging is that it is trying to execute an OAuth callback routine to extract a code from the url. Failing that it redirects the client to get a code from the OAuth server.