Subtitle Edit

What's new in this version:

New:
- Automatic Refresh Token for OAuth 2.0 - You now have the option to automatically renew the OAuth 2.0 tokens you generate in the Postman app before they expire. You can turn this setting off if you prefer to manually refresh the token when you want. Click here to see a video tutorial
- Two-Factor Authentication - You can now enable two-factor authentication for your Postman account. After password verification, you’ll be asked to provide a time-based one-time password (TOTP) generated by an authenticator app. Click here to see a video tutorial
- We strongly recommend leveraging 2FA as it reduces the potential risk of an attacker compromising your account.

Improved:
- Added support for NTLM v2 authentication
- Added support for mutating request auth via scripts
- Added support for console.clear() to automatically clear Postman console via scripts. Click here to see a video tutorial
- Better support for JavaScript Promises and async-await in scripts
- Added support for sending metadata in gRPC server reflection
- Added support for prefix path in gRPC server URL
- Added support for default fields in gRPC response
- Improved performance of gRPC server reflection

Fixed:
- a bug where OAuth 2.0 request incorrectly adds client_id in basic authentication
- a bug where a response with invalid headers was getting rejected due to strict parsing
- a bug where gRPC server reflection failed for the field name constructor
- a bug where gRPC server reflection fetched the same proto multiple times
- a bug where gRPC request with Unix domain socket used to fail