Skip to main content
OAuth 1.0 is a protocol that allows applications to make authenticated HTTP requests on behalf of a user without exposing their credentials. Bruno supports the full OAuth 1.0 specification (RFC 5849), including multiple signature methods and flexible parameter placement.

​
Setting up OAuth 1.0

  1. Open your request.
  2. Navigate to the Auth tab.
  3. Select OAuth 1.0 from the dropdown list and configure the required fields.
oauth1 OAuth 1.0 can be configured at the request, folder, or collection level. When set at the collection or folder level, all child requests that use Inherit as their auth mode will use the shared OAuth 1.0 configuration.

​
Configuration fields

​
Core credentials

​
Signature

​
Advanced

These fields are optional and are hidden in a collapsible section. oauth1-advanced
All OAuth 1.0 fields support Bruno variables. For example, you can store your consumer key in an environment variable and reference it as {{consumerKey}}.

​
Supported signature methods

Bruno supports seven signature methods: auth1-sign-method
When using an RSA signature method, you must provide a PEM-formatted private key. The Consumer Secret field is not used with RSA methods.

​
Parameter placement

You can choose where OAuth parameters are included in your requests:
  • Header (default) — OAuth parameters are sent in the Authorization header, formatted per RFC 5849.
  • Query Params — OAuth parameters are appended to the request URL as query parameters.
  • Body — OAuth parameters are merged into the request body as application/x-www-form-urlencoded parameters.
Body placement requires a form-urlencoded body. If your request uses a different content type, the body will be replaced with OAuth parameters.

​
CLI support

OAuth 1.0 is fully supported in the Bruno CLI. When you run collections or requests via bru run, OAuth 1.0 authentication is applied automatically to requests that have OAuth 1.0 configured.