Image

Make API Requests with OAuth for Drupal 8, 9, 10, and 11

When you create a fully decoupled application, the code in your application can't rely on things like the fetch() function's same-origin policy and the browser's use of cookies to authenticate requests. Instead, you need to use alternative methods like OAuth or JSON Web Tokens (JWTs).

We'll focus on setting up and using Drupal as an OAuth provider, and allowing a decoupled application to authenticate users via OAuth. This same technique applies just as well if you want to use JWTs.

In this tutorial, we'll:

  • Install the Simple OAuth Drupal module, and configure it to work with the authorization code grant flow to allow our code to obtain an access token.
  • Demonstrate how to retrieve and use an OAuth access token to make authenticated requests.

By the end of this tutorial, you should know how to install and configure the Simple OAuth module and make authenticated API requests using an OAuth authorization code grant flow.

Decoupled Headless Drupal