Custom authorization (headers) without using pre-request (for security/safety)

Bjorn
Mon, 11 Aug 2025 12:48:29 +0000
Help Hub

When I have a test set (folder), I can define “Authorization” on the folder-level. The options in the list are a whole bunch, of which among “AWS signature”, which looks the most similar to what I need. Here I can fill in a (vault) value for the “AccessKey” header and “SecretKey” header. My API, however, requires custom headers for the (access/)id and secret. This option, however, is not in the list. I could use the pre-request, enable pre- and post-scripts from the vault and add the desired headers form there, but that is a potential security issue, with potential libraries potentially snooping my vault secrets. Could Postman please consider allowing a custom header type, where I can define the header name and header value (with vault values, where desired)?

2 posts - 2 participants