Security test using groovy script has an error.
The application uses OAuth1.0. For the scan, I have created the groovy scripts for each test case (every other endpoint). When I run through the groovy script, it was executed without any problem, and I can check the right response as below.
However, when I send the request in the REST editor, the response shows an error "oauth_problem=nonce_used".
Even though the groovyscript was coded correctly, I don't think the SoapUI Pro scan can grap the groovy script code properly when I run the security scans.
The security scan report shows same response from above the reponse.
How can I resolve this issue in the SoupUI scan?
Hi kimyeo01,
I've found the following explanation for the nonce_used error:
"The nonce-timestamp combination has already been used"
Source: https://devdocs.magento.com/guides/v2.3/get-started/authentication/oauth-errors.htmlSo, it seems that you need to use a new value when you run the request again.
Also, I can recommend checking the ReadyAPI logs and logs from the server.
