I'm building a decoupled Next.js frontend to consume data from Drupal JSON:API on a local site installed with Lando. I want to use the simple_oauth module to allow registered users to edit content on the front end.

My first target is requesting an Authorization Code, so I'm testing the request in Postman and with cURL. Both approaches are consistently giving me 401 "invalid_client" error messages.

To the best of my knowledge, all the settings are correct including the required RSA keys, but I have yet to figure this out. Here's the cURL command I'm using:

curl -X GET \

...where http://react1.lndo.site is my Drupal 9 Lando site url, b7958f62-df63-4b95-9a55-20954178d788 is the UUID of my consumer, and 'oauth' is the name of a role I created with permissions to allow registered users to add, edit and delete Article nodes (*this role is selected in the 'Scopes' list of the consumer).

I've searched for hours including tons of questions to ChatGPT, but have yet to figure this out. Please help me get on the right track.

1 Answer 1


Looking through the Simple OAuth code, a Consumer entity is loaded with the field client_id having a value of the client_id parameter from the URL. You said you are passing the UUID of the Consumer as the client_id in your URL which would be incorrect, and explain why the system says your consumer is not found. You should view/observe/dump the consumer to determine the value of the client_id field.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.