Announcing Postman for the Web, Now in Open Beta

[kinlane]

Today, we announced a new beta version of Postman that addresses a wide range of requests from our fantastic user community: Postman on the web.

You can read the full beta launch announcement here, and you can access the beta anytime at https://go.postman.co/build.

And now, here’s where you come in:

We’re sharing this release early because we need your feedback about making API requests using the web, managing your API operations in the cloud, and everything else that you need to do with Postman on the web. Please jump into the beta and push it, poke it, and give it your best shot.

Then, go ahead and leave your feedback below so we can help answer your questions, listen to your ideas, and route any bugs or other issues to right channels.

Your feedback will help push forward everything we’re doing with this effort, and will help set the stage for Postman web agents and other features we have planned on the roadmap for you.

• Please report any security issues to security@postman.com

[danny-dainton]

[Bhaumik (Bhaumik P)]

https://web.postman.co/build

COULD NOT LOAD.

[kinlane]

You caught it a little bit early, we were just getting up to generate link. This URL should get you there - https://go.postman.co/build

[orendi84]

[kinlane]

Click on “Switch Postman Agent”

[jojimail (Joji Augustine)]

I can see a local server exposed in port 10533 running with Postman agent.
Isn’t running a local server exposed via http a security risk? Not sure if there are any severe vulnerabilities as of now with the agent but can lead to in the future.

The server exposed by Postman agent can be accessed from any website. Looks like CORs is allowed for all domains.
Got the following header in GET http://localhost:10533/knockknock
Access-Control-Allow-Origin:*

[jojimail (Joji Augustine)]

Something similar that happened with Zoom

Zoom, CORS, and the Web | CSS-Tricks

[iamsaswat (Saswat Das)]

Hi @jojimail
We have architected the agent in a slightly different manner. You can read more on that here https://blog.postman.com/introducing-the-postman-agent-send-api-requests-from-your-browser-without-limits/

Due to browser limitations only HTTP based communication is possible for the locally installed agent from our web platform.
For that reason we rely on a remote servers based trust mechanism to verify both the web platform and the agent, and only after successful verification does the agent actually work.

With this method of verification CORS based blocking is not required and enable the agent to be more versatile.

Have a hack at it! Your feedbacks are most welcome.

[Bhaumik (Bhaumik P)]

Ain’t no difference than yesterday.

[postman-harryi3t (Harendra Singh)]

@Bhaumik
Can you create a ticket here: https://github.com/postmanlabs/postman-app-support/issues and share some more details? It would really help us in debugging and fixing the issue faster

• The logs/screenshots from the browser console
• The screenshots of the network panel while you refresh the page
• Details about the browser you are using (name and version)

Please make sure the screenshots/logs do not contain any sensitive information such as API keys or access tokens.

[krishnakumar.tce (Krishna Kumar Natarajan)]

I have selected the Postman Browser agent, however when I send a request I’ seeing the error

Error: Browser does not support cross-origin request | Use Postman Desktop agent.

I thought the whole point of the new browser app was to use the agent to overcome the CORS limitations on the browser?

[krishnakumar.tce (Krishna Kumar Natarajan)]

I have installed the Agent and it’s running but in the Web app, I see the message, Make sure the agent is installed and check the toolbar to see if it’s running.

on the toolbar, the agent says Status: Listening

[kinlane]

@krishnakumar.tce did you click on the use / switch Postman Agent Link you get in the message “Error: Browser does not support cross-origin request | Use Postman Desktop agent.”? <–if you switch it on there it will run.

[krishnakumar.tce (Krishna Kumar Natarajan)]

See the image. Postman agent is running. In the background, you can see the browser app complaining with the error message -

Make sure the Postman agent is installed and check your toolbar to see if it’s running

[kinlane]

The message is a link to turn on.

[krishnakumar.tce (Krishna Kumar Natarajan)]

I have tried that, it says it switched, but Send is still disabled as you can see in the image.

[kinlane]

And you confirmed Agent is running? I’d also look at your processes to make sure you have Postman Agent process in motion for it to pick up and work with.

[krishnakumar.tce (Krishna Kumar Natarajan)]

Unfortunately looking at Processes is blocked on my work PC and all I can see is on the tray itself on what the agent says about it’s status.

[krishnakumar.tce (Krishna Kumar Natarajan)]

could it be anything to do with the proxy that my company uses for external communication.
My desktop postman app works fine and it uses the system proxy in the Postman settings.