For detailed information on the API refer directly to the online documentation
- Ensure you have created a FatSecret Platform API account here and sign in.
- Navigate to "Generate / View API Keys".
- Navigate to "IP Restrictions".
- In the "IP Restrictions" section, whitelist your desired IP Address. We block requests to FatSecret API for OAuth2.0 for a Key/Secret if the source IP is not white listed. Up to 15 ranges of IP addresses can be whitelisted.
- Now head to Postman and fork the collection by clicking the "Run in Postman" button:
- In your newly forked collection, copy your Consumer Key and Consumer Secret into the collection variables as consumer_key and consumer_secret. Copy your Client ID and Client Secret into the collection variables as client_id and client_secret.
- Navigate to API Reference (OAuth 1.0) section in postman.
-
You can now access all endpoints not marked as "Profile".
-
For access to "Profile" endpoints, Navigate to Profile - Authentication folder and call the "Create" endpoint to create a profile and receive an oauth key and oauth secret.
-
Copy your newly created OAuth Key and OAuth Secret into the collection variables as
access_keyandaccess_secret.
- Navigate to API Reference (OAuth 2.0) section in postman.
-
In the "Configure New Token" section ensure that the correct variables are set and click "Get New Access Token".
-
Use the newly created token.
- Navigate to 3-Legged OAuth section in postman.
-
Use the "Request Token" endpoint to request a new oauth token and oauth secret
-
Copy the
oauth_tokenandoauth_secretreceived into the collection variables. -
Use the "Authorize" endpoint to authorize the
oauth_tokenreceived. You will need to log in to your fatsecret account to do this. A link should return the verifier value, copy this into the collection variableoauth_verifier.
NOTE: You may need to send the authorize request using a browser in order to login and open the callback url response.
-
Finally, Use the "Access Token" endpoint to get the access token and access secret.
-
Copy the received oauth token and oauth token secret from the "Request Token" end point to the
access_tokenandaccess_secretcollection variables. -
You can now access endpoints in the OAuth1.0 section.
Enjoy the API!







