Forum Discussion

ohaya's avatar
ohaya
Contributor
7 years ago

SOLVED-Trying to get the SAML <Assertion> element from a response to Transfer property

Hi,   I am trying to get the signed SAML <Assertion> element from a response to one test step in one test case into a Transfer property, so that I can inject that assertion into the body of a reque...
  • ohaya's avatar
    ohaya
    7 years ago

    Hi,

     

    Sort of answering my original question, the following in a groovy script step seems to be able to get the raw response:

     

    def rawResponse = testRunner.testCase.testSteps["TC1 - NoAttribs"].testRequest.response.rawResponseData
log.info new String(rawResponse)

    However, the rawResponse has not just the XML I am interested in, but also the HTTP response headers, etc.:

     

    Wed Apr 04 14:36:19 EDT 2018:INFO:HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Connection: close
Content-Type: text/xml;charset=UTF-8
Content-Length: 4249
Date: Wed, 04 Apr 2018 18:31:13 GMT
Connection: close

<?xml version="1.0" encoding="UTF-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Body>
.
.
.

     

    I now need to strip off that stuff to get the XML so that I can then parse it for the <saml2:Assertion> element.  That's the next thing I need to figure out how to do :(...

     

    Does anyone know of an easy way to do that with Groovy?

     

    Thanks,

    Jim

ohaya's avatar
ohaya
Contributor
7 years ago

Here is more detail on my latest attempt:

 

- In a testcase where I have test steps that requests the Assertion tokens, I have a Transfer property that extracts the Assertion token, which is a digitally-signed token, where:

 

  Source:  test step 1  - Response - Xpath

//*[local-name()='Assertion']

  Target:  test suite - SAMLAssertion1 - Xpath

 

- In the next test case, where I have a test step that has a request to validate the Assertion token, in the validate request, I have included

 

.
.
.
<Validate>
${#TestSuite#SAMLAssertion1}
</Validate>
.
.

I am checking the HTTP Log when that latter Validation request is sent, and it looks like the token is being injected into the validation request, BUT, there are newline characters.  For example, instead of:

 

<saml:Assertion ID="SamlAssertion-b6c1..../">  <saml:Issuer>https://xxxx/sts</saml:Issuer>....[\n]
.
.

the request has:

 

<saml:Assertion ID="SamlAssertion-b6c1....[\n]"
              <saml:Issuer>https://xxxxx/sts</saml:Issuer>[\n]"
.
.
.

Since the Assertion token is signed, those newline characters that are being added are causing the digital signature to fail, and thus the validation request is getting a failed result.

 

Is there a way to get the transfer property to not add those additional newline characters when the property is used in the validation request?

 

Thanks,

Jim