OAuth auth-code flow with Postman, error AADSTS900144, must contain the parameter 'grant_type'

Question

OAuth auth-code flow with Postman, error AADSTS900144, must contain the parameter 'grant_type'

Kylie 1

I have been trying to follow this page v2-oauth2-auth-code-flow using the Postman collection linked at the start of the page.

I am able to receive an authorization code from the api, but when attempting to get a token I receive the error: "AADSTS900144: The request body must contain the following parameter: 'grant_type'."

Other answers seem to point to this error being causes by either using json instead of urlencoding, or the 'grant_type' parameter being placed in the header instead of the body, but as far I can tell it is correct and placed in the body. I presume that this is formatted correctly since the collection is coming from Microsoft, is there any configuration I need to do in Postman beforehand or something else that seems off?

AmanpreetSingh-MSFT 56,951 Reputation points Moderator

2022-06-09T07:04:15.257+00:00
anonymous user-1104 • Looking at the screenshot, I don't see any problem. Could you please check and confirm the below points:

Ideally, when you select x-www-form-urlencoded radio button in the Body section, it automatically sets the Content-Type=x-www-form-urlencoded under the Headers tab. Please make sure that it is added by clicking on hidden headers as highlighted below:

If the Content-Type=x-www-form-urlencoded header is not present, you need to add that manually.

If it is already there, click on bulk edit under the Body tab and make sure the Keys and Values are colon-separated. Paste the parameters in the notepad and confirm there are no garbage characters.

You can also use form-data instead of x-www-form-urlencoded - both works.

It must be due to an encoding issue or garbage character.
AmanpreetSingh-MSFT 56,951 Reputation points Moderator

2022-06-13T05:33:30.777+00:00

anonymous user-1104 • Just checking if you had a chance to test it out.
Marilee Turscak-MSFT 37,271 Reputation points Microsoft Employee Moderator

2022-06-20T20:54:18.017+00:00

Hi anonymous user-1104, just checking to see if you were able to test out the steps provided by Amanpreet?

2 answers

Your answer

AmanpreetSingh-MSFT 56,951 Reputation points Moderator

2022-06-09T07:04:15.257+00:00

anonymous user-1104 • Looking at the screenshot, I don't see any problem. Could you please check and confirm the below points:

Ideally, when you select x-www-form-urlencoded radio button in the Body section, it automatically sets the Content-Type=x-www-form-urlencoded under the Headers tab. Please make sure that it is added by clicking on hidden headers as highlighted below:

If the Content-Type=x-www-form-urlencoded header is not present, you need to add that manually.

If it is already there, click on bulk edit under the Body tab and make sure the Keys and Values are colon-separated. Paste the parameters in the notepad and confirm there are no garbage characters.

You can also use form-data instead of x-www-form-urlencoded - both works.

It must be due to an encoding issue or garbage character.
AmanpreetSingh-MSFT 56,951 Reputation points Moderator

2022-06-13T05:33:30.777+00:00

anonymous user-1104 • Just checking if you had a chance to test it out.
Marilee Turscak-MSFT 37,271 Reputation points Microsoft Employee Moderator

2022-06-20T20:54:18.017+00:00

Hi anonymous user-1104, just checking to see if you were able to test out the steps provided by Amanpreet?

Answer 1

Johnnie 16

After re-installing Postman and deleting my collection, I continued to have the same problem. I then noticed an option within the Configure New Token section of the Authorization tab, inside of the Client Authentication drop-down. Changing the selection from Send as Basic Auth header to Send client credentials in body fixed the issue.

An Nguyen 0 Reputation points

2023-12-10T19:36:14.78+00:00

thank you so so much, this fixed it

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

OAuth auth-code flow with Postman, error AADSTS900144, must contain the parameter 'grant_type'

2 answers

Your answer