According to https://www.make.com/en/help/tools/http#make-an-oauth-2-0-request, You should be using this redirect_uri https://www.integromat.com/oauth/cb/oauth2 Answer from samliew on community.make.com
🌐
Reddit
reddit.com › dev › api › oauth
reddit.com: api documentation
The user can either be passed in by name (nuser) or by fullname (iuser). If type is friend or enemy, 'container' MUST be the current user's fullname; for other types, the subreddit must be set via URL (e.g., /r/funny/api/unfriend) OAuth2 use requires appropriate scope based on the 'type' of the relationship:
🌐
GitHub
github.com › reddit-archive › reddit › wiki › oauth2
OAuth2 · reddit-archive/reddit Wiki · GitHub
November 9, 2017 - In order to make requests to reddit's API via OAuth, you must acquire an Authorization token, either on behalf of a user or for your client (see Application Only OAuth, below).
Author   reddit-archive
🌐
Better Auth
better-auth.com › docs › authentication › reddit
Reddit | Better Auth
To use Reddit sign in, you need a client ID and client secret. You can get them from the Reddit Developer Portal. ... For production, set it to your application's domain (e.g. https://example.com/api/auth/callback/reddit)
🌐
Stateful
stateful.com › blog › reddit-oauth
Reddit OAuth: Let Users Sign into Your App With Reddit Login • Stateful
August 16, 2022 - All authenticated request to Reddit API makes use of the following URL: https://oauth.reddit.com.
🌐
Reddit
reddit.com › r/redditdev › using the reddit api after 2 years - oauth and praw has me confused after the api changes
r/redditdev on Reddit: Using the Reddit API after 2 years - OAuth and PRAW has me confused after the API changes
August 29, 2023 -

To my understanding, the changes mean that users with OAuth have 100 requests per minute - which satisfies my requirements. I've been looking around for some proper documentation about all this.

I found the following https://github.com/reddit-archive/reddit/wiki/OAuth2-Quick-Start-Example#first-steps that provides the curl command to get an access token and works fine. Is that all the documentation there is?

Is there anyway I can do the same via Praw (or should I just use the token from the above with Praw)? Additionally, the above resource doesn't show me how to access refresh tokens, is there a separate curl command for them?

I apologize if this is a stupid question but I can't seem to find any coherent docs and haven't used the API for a long time.

🌐
Reddit
reddit.com › r › reddit.com › wiki › api
r/reddit.com Wiki: Reddit API Access
November 28, 2023 - Select “I’m a Developer” and “I want to register to use the Reddit API.” Then, you can create credentials here.
🌐
Data365
data365.co › blog › how-to-get-reddit-api-key
How to Get Reddit API Key: Step-by-Step or Skip-the-Setup? | Data365.co
May 27, 2025 - Depending on your app type, there are a few OAuth2 flows Reddit supports. For personal use and scripts, the simplest option is the password grant flow. It’s not recommended for public apps, but for solo developers just trying to access their own data (or public subreddit data), it’s the fastest way to get a working token. You send your Reddit username, password, and app credentials to Reddit’s token endpoint. In return, you get a Reddit access token. That Reddit API token is what you’ll use to make authenticated API requests.
Find elsewhere
🌐
DEV Community
dev.to › imtyrelchambers › build-a-reddit-scraper-authenticating-with-reddit-oauth-4519
Build a Reddit Scraper: Authenticating With Reddit OAuth - DEV Community
July 15, 2019 - The function getAccessToken is called once we receive the go ahead to authenticate with Reddit. Once that finishes, we are all set. The problem comes when, after an hour, we need to make another request to an OAuth endpoint.
🌐
Reddit
reddit.com › r/redditdev › reddit api with oauth2 using google apps script
r/redditdev on Reddit: Reddit API with OAuth2 using Google Apps Script
April 30, 2025 - I found that the oauth flow will fail if 2FA is enabled, but you can work around it (and still keep 2FA enabled) by performing the one-time auth code request in the browser. Once you have the auth code, the script can be set to run on a timer or triggered by a webhook, without needing to authorize again in the browser. https://blog.greenflux.us/reddit-api...
🌐
Reddit
reddit.com › r › oauth
OAuth 1.0a, OAuth 2, OpenID Connect
February 11, 2015 - The app uses OAuth for its authorization requests. So I've created an instance of Filip Skokan's `node-oidc-provider` (https://github.com/panva/node-oidc-provider) to handle API access.
🌐
Readthedocs
redditclient.readthedocs.io › en › latest › oauth
Oauth Setup - Reddit::Client Documentation
use Reddit::Client; my $reddit = new Reddit::Client( user_agent => "test /u/username", client_id => "DFhtrhBgfhhRTd", secret => "KrDNsbeffdbILOdgbgSvSBsbfFs", username => "reddit_username", password => "reddit_password" ); my $me = $reddit->me(); print "You've got mail!" if $me->{has_mail};
🌐
GitHub
github.com › reddit-archive › reddit › wiki › oauth2-quick-start-example
OAuth2 Quick Start Example · reddit-archive/reddit Wiki · GitHub
In [1]: import requests In [2]: import requests.auth In [3]: client_auth = requests.auth.HTTPBasicAuth('p-jcoLKBynTLew', 'gko_LXELoV07ZBNUXrvWZfzE3aI') In [4]: post_data = {"grant_type": "password", "username": "reddit_bot", "password": "snoo"} In [5]: headers = {"User-Agent": "ChangeMeClient/0.1 by YourUsername"} In [6]: response = requests.post("https://www.reddit.com/api/v1/access_token", auth=client_auth, data=post_data, headers=headers) In [7]: response.json() Out[7]: {u'access_token': u'fhTdafZI-0ClEzzYORfBSCR7x3M', u'expires_in': 3600, u'scope': u'*', u'token_type': u'bearer'} Use the token. Notice that for using the token, requests are made to https://oauth.reddit.com.
Author   reddit-archive
🌐
Reddit
reddit.com › r/redditdev › reddit api oauth2 for web app development
r/redditdev on Reddit: Reddit API Oauth2 for Web App Development
February 5, 2021 -

Hello All,

I'm trying to learn how to use the Reddit API for non-anonymous API requests. I'm having trouble how to set up a dev environment that lets me actually request data (user, history, read api endpoints). I created a nodejs server that can successfully request authentication for the user and retrieve the appropriate access token, but I don't know how to use this server, or any other method, to use this token on the same dev machine due to CORS errors.

How do I go about developing with the Reddit API for a web app created in React? I'm using this opportunity to try to learn the Reddit API and React. Do I need to host a server elsewhere to be able to develop the actual user-facing web application?

Thanks in advance!

Top answer
1 of 2
4
The are a couple strategies you can use for this. The way I normally do it is to have a server (e.g. your node server) that handles the auth flow and is also responsible for making all the API requests to Reddit. Each user that authenticates has their access tokens stored in a session. Then, for example if your web app needs to get info for the currently authenticated user, it would send a request to your server, which would in turn send a request to the Reddit API, authenticating with that user's access token. One benefit of this approach is that the client (your React app) never sees the access/refresh tokens. It also allows you to filter or modify the data Reddit returns before passing it to your web app, allowing you to create a layer of abstraction between the Reddit API and your frontend if you want. The other method is to have your React app use the "Implicit Grant" flow to retrieve tokens without a server. This is a modified OAuth flow used for applications where requests need to be made from an environment that can't be trusted with your application's client secret. If you had a Node server working for Reddit auth, one step of the authentication process you already have includes sending your client secret, but you can't include that value in a React app because that would expose it. The implicit grant flow is documented here . The obvious upside to this method is that you don't have to write a server - this enables you to write a truly thick client without relying on a separate service (other than Reddit) for data processing. Note that you'll have to use a different type of API app to use the implicit grant flow - this is mentioned in the docs.
2 of 2
2
Thanks for the silver kind stranger!
🌐
PixelsTech
pixelstech.net › home › articles › accessing reddit top posts using oauth
Accessing Reddit top posts using OAuth | PixelsTech
December 16, 2023 - The API to access programming subreddit top posts is https://oauth.reddit.com/r/programming/top.json. To access it properly, we need an access token, this access token can be generated using OAuth.
🌐
Reddit
reddit.com › r/redditdev › api changes and personal oauth
r/redditdev on Reddit: API Changes and Personal OAuth
June 10, 2023 -

Hey guys! I've been loosely following what's been happening with the Reddit API changes. There's a few things I'm not fully understanding; I was hoping someone on here could help me out.

Disclaimer: I'm a software developer but have never interacted with the Reddit Data API.

From what I understand, Reddit is essentially going to start charging API users for access. I was reading these comments from the latest AMA with u/spez:

Effective July 1, 2023, the rate limits to use the Data API free of charge are:

100 queries per minute per OAuth client id if you are using OAuth authentication and 10 queries per minute if you are not using OAuth authentication.

and:

Effective July 1, 2023, the rate for apps that require higher usage limits is $0.24 per 1K API calls (less than $1.00 per user / month for a typical Reddit third-party app).

Some apps such as Apollo, Reddit is Fun, and Sync have decided this pricing doesn’t work for their businesses and will close before pricing goes into effect.

Just from these comments, it sounds to me like it would be possible to have an app that uses the user's own OAuth to call the API.

100 requests per minute sounds very reasonable. And then I started thinking, how else are these apps working today?

I saw that the Apollo developer made a GH repo available with the code for his app's backend. But, why does an app that is just a frontend for the Reddit API need to interface with its own backend? Do all of these 3rd-party apps have their own backend server that calls the Reddit API? What's the point of doing that?

Am I misunderstanding the free API tier and how a 3rd-party app could use it? Is there a reason why these apps need to use their own API key and not the end-users'?

I feel like I am definitely missing something here.

🌐
Reddit Help
support.reddithelp.com › hc › en-us › articles › 16160319875092-Reddit-Data-API-Wiki
Reddit Data API Wiki – Reddit Help
November 11, 2025 - You can use the Reddit Data API, subject to our Responsible Builder Policy, Developer Terms and Data API Terms. ... Clients must authenticate with a registered OAuth token.
Top answer
1 of 2
24

As of right now, you cannot retrieve a permanent access token. You have 2 options that come close.

The first is to request a "refresh" token when using the standard OAuth flow. That's what you're doing by sending "duration" as "permanent" in your code. The refresh token can be used to automatically retrieve new 1 hour access tokens without user intervention; the only manual steps are on the initial retrieval of the refresh token.

The second alternative, which applies only when writing a script for personal use, is to use the password grant type. The steps are described in more detail on reddit's "OAuth Quick Start" wiki page, but I'll summarize here:

  1. Create an OAuth client (under https://www.reddit.com/prefs/apps) with type = "script"
  2. Make a request to https://www.reddit.com/api/v1/access_token with POST parameters grant_type=password&username=<USERNAME>&password=<PASSWORD>. Send your client ID and secret as HTTP basic authentication. <USERNAME> must be registered as a developer of the OAuth 2 client ID you send.
2 of 2
17

A client_id and client_secret can be generated for a reddit account by going to https://www.reddit.com/prefs/apps and creating an app:


The part I have hidden is my client_id.

Then you can use a client like praw to access reddit e.g. with Python:

import praw
r = praw.Reddit(client_id='insert id here',
                client_secret='insert secret here',
                user_agent='insert user agent')
page = r.subreddit('aww')
top_posts = page.hot(limit=None)
for post in top_posts:
    print(post.title, post.ups)

You could use your current browser's user agent, which can be easily found by google searching "what is my user agent" (among other ways).