Postman is logging all your secrets and environment variables
Postman is logging all your secrets and environment variables
Who the fuck is using postman anymore anyway?
What alternative do you recommend? Last I checked, the alternatives weren’t so great.
https://www.usebruno.com/ Open source, no cloud, git friendly
Check hurl out. Unlike bruno or Postman, it is free and blazingly fast. Define your requests in plain text format and commit them to your version control.
It also allows you to export your plain text hurl files as curl commands.
If you are already using JetBrains IDEs, a lot of them have a built-in http client that isn’t too bad.
Yaak https://yaak.app/
500k customers
Was using Bruno and RapidAPI (fka MacPaw) locally, but they couldn't do conditional sequences properly. Switched to Postman, which could, despite knowing they kept everything on the cloud.
Guess I'm switching back 🤦🏻♂️
I left postman behind after the forced cloud integration, but admittedly, it is difficult to find something as simple and richly featured to replace it.
I ended up using a vs code extension called Thunder Client.
Unfortunately, I do, for one client for work as a requirement.
Its for their own tool though, so its their problem.
I ditched it in favor of simple Python scripts, which is fine for my needs. Others at work seem to like it though.
This article contradicts itself. It says “all secrets” and then says headers are not logged to Postman.
My company banned the use of postman for a few years now.
If it requires a login, you can be sure it is scraping everything it can.
Mine finally did too at the end of last year! Apparently they had checked Postman back in the day when it didn't require a login and deemed it fine, but totally missed their move into being a cloud service. I had to prod the Cloud Service Security guy for months until he finally took a look at it
Not from a third party, but I did have to adapt a lot of collections to use on Insomnia. It does allow importing from the postman v3 collection format, but it's a bit hit or miss on wether it works 100%. I had a few problems with sequential requests, but they were easy enough to fix in my case.
If it's just for testing, I'd try that. If they require Postman it for validation purposes, then there really isn't much you can do.
Http scripts get you 50% there which, with a dab of code on top gives me pretty much of what i need.