Security test using groovy script has an error.

[kimyeo01]

The application uses OAuth1.0.  For the scan, I have created the groovy scripts for each test case (every other endpoint). When I run through the groovy script, it was executed without any problem, and I can check the right response as below.

However, when I send the request in the REST editor, the response shows an error "oauth_problem=nonce_used".
Even though the groovyscript was coded correctly, I don't think the SoapUI Pro scan can grap the groovy script code properly when I run the security scans.

The security scan report shows same response from above the reponse. 

How can I resolve this issue in the SoupUI scan?

[Nastya_Khovrina · Accepted solution]

Hi kimyeo01,

I've found the following explanation for the nonce_used error: 

"The nonce-timestamp combination has already been used"
Source: https://devdocs.magento.com/guides/v2.3/get-started/authentication/oauth-errors.html

So, it seems that you need to use a new value when you run the request again.

Also, I can recommend checking the ReadyAPI logs and logs from the server.