Skip to main content
Postiz is a bundled OAuth2 provider in authsome. Postiz social posting and scheduling APIs.

​
At a glance

​
Prerequisites

Postiz uses the device authorization grant. No callback URL is registered. You enter a short code on a separate device after running authsome login.

​
Log in

Authsome prints a verification URL and a short user code. Open the URL on any device, enter the code, approve the app, and authsome’s poll completes. Verify:

​
Multiple accounts

Pass --connection <name> on login and on every read command to keep two or more accounts on the same provider side by side. See Multiple connections per provider for the full pattern.

​
Use the token

Run the agent under the proxy (recommended).
Under the proxy, authsome sets POSTIZ_ACCESS_TOKEN=authsome-proxy-managed in the child’s environment and injects the real token into outbound requests to api.postiz.com. The child process never sees the actual value. Refresh tokens are never exported.

​
Override the bundled definition

User-registered files always win over bundled definitions.

​
What’s next

Headless setup

Postiz is the only bundled provider that defaults to the device code flow.

Run agents with the proxy

Inject the access token into outbound requests without exposing it.