Remove "Change Password" option in "User Profile" dropdown when using other authentication
Currently when using another authentication such as SSO, the User Profile drop down provides the external user with the Change Password option. Though this feature only applies to the internal user and authentication. Therefore, it should not be made available for external users. Please remove the "Change Password" option for external users.Using Windows-MY Keystore for authentication with smartcard
It would be awesome if you could get the authentication with smartcard working for SoapUI. Seehttps://community.smartbear.com/t5/SoapUI-Open-Source-Questions/Using-Windows-MY-Keystore-for-authentication-with-smartcard/m-p/225566#M32664319Views0likes0CommentsHow to pass SSL Certificate with Swagger UI from Angular 4 when invoking a REST API
Hello, I have a query. How to pass SSL Certificate with Swagger UI from Angular 4 to invoke a REST API , which is enabled with Mutual Authentication via certificate? Do we have any provision to intercept the request in Swagger UI before invoking a particular API request. My Application Ex: My application(A) is getting the Swagger JSON from the bitbucket of another target application(B) and rendering it in my application(A) with Swagger UI. Now the target application(B), has enabled Mutual Auth. Now when the API of application(B) is invoked from the Swagger UI of my application(A), how can we pass the SSL Certificate along with this API call? I would also like to know what other approach(es) can be used to pass Authentication when trying out any API?Authentication request into a Docker container
Hi all, I'm trying to use SoapUI Open Source to do some simple testing of some web services. Our standard development environment is built inside a docker container. If I enter the WSDL location http://bank:7047/NAV/WS/California/Codeunit/GetNAVData I am prompted for my credentials. However, I get this error returned: Error loading [http://bank:7047/NAV/WS/California/Codeunit/GetNAVData]: org.apache.xmlbeans.XmlException: org.apache.xmlbeans.XmlException: error: Unexpected end of file after null I can enter the same URL into a normal browser window and it retrieves the WSDL. I can also use browser-based tools such as Wizdler to retrieve WSDL and submit "Post" and "Get" transactions. If I access our shared test environment which is NOT in a Docker environment (i.e. just another server on our network), my credentials work fine and the WSDL is returned. I tried a demo of SoapUI Pro, and I was able to get it to work with Docker. I'm just wondering if there's a setting in SoapUI Open source that allows authentication into Docker containers? Thanks, Ron601Views0likes0CommentsWorking with Django authentication?
I'm trying to make a standard Swagger UI page work with Django's standard authentication scheme. Django prefers to receive a username and password as JSON content in the body, and passes back a token in a return JSON message. That token must then be included in the Authorization header of future requests. Is there something in Swagger that does this, and I missed it? Is there a better authentication framework that Django has an implementation of? Please let me know. Thanks, RobertCreating virtual service using swagger definition (swagger.Json) URL failing
i am trying to create a virtual service using an existing swagger definition (swagger.json) file but unfortunately it's failing with the error "could not import a definition from the specified file" though user name and password provided. when i have checked the ReadyAPI log seeing an error " Thu Jun 04 23:39:18 EDT 2020: INFO: 443 requires authentication with the realm '/ charset=UTF-8' Thu Jun 04 23:39:44 EDT 2020: INFO: 443 requires authentication with the realm '' Note: intentionally not sharing the API definition swagger.json URL. Thank you, MannamSolved2.1KViews0likes2CommentsNo Community Help with SAML 2 Config Posts. Can some provide an example of SAML(XML) 2 in SoapUI?
I'm having difficulty configuring SAML authentication using SoapUI Pro and I've read many similar posts in Open Source community; however, they go unanswered. For example, "Could some give a sample example of SAML(XML) in SoapUI WS configuration" and "Enveloped Signature for SAML (XML) WSS Entry". SmartBear's page doesn't provide an example SAML(XML) Assertion. Collaborator has a page that goes into some depth to help the customer, but not SoapUI OS or Pro. We use ForgeRock's OpenAM to setup SAML and I think I’ve gleaned as much as I can from it. For instance, XML Canonicalization algorithm, XML digest algorithm, XML signature algorithm, ID Token Signing Algorithms supported, ID Token Encryption Algorithms supported, Circle of Trust, etc.; however, there’s no 1-for-1 match between what OpenAM provides that SoapUI Pro asks for. I've asked our DevOps/Integration teams for a SAML(XML) Assertion, but they haven't been able to accommodate, yet. Could someone give a sample example of SAML(XML) in SoapUI WS configuration? Regards,Solved3.9KViews0likes6CommentsSOAP UI - Basic Authentication - where do I find it in Server Code?
I have a SOAP Server written in PHP - and am Testing using SOAP UI. Everything works fine and returns results as expected. I am now trying to add in Basic Authentication - have set up in SOAP UI with Username and Password - BUT can't find how to check it in the Server code? I was expecting the credentials to be in the [SERVER] object passed to the server - but they are not. Can anyone help and advise how I check these items? Thanks PhilSolved12KViews0likes11CommentsBasic Auth and Endpoint Explorer
I'm slightly embarassed to post this, but I'm currently stumped on the issue. Question: What are the potential issues that would allow Endpoint Explorer to succeed when a test step for the same URI fails? Basically, while using Endpoint Explorer I get a proper and successful response from an API that requires basic authentication while it fails in a test step. I was using Endpoint Explorer to troubleshoot the authentication issue at the time I succeeded in receiving a proper response message. The last thing I had configured, and I know this may seem odd, was Outgoing and Incoming WS-Security Configurations. I have even configured the Keystore, the Username and Password in the Request Properties, and the Auth Basic (Built-in) Authorization tab. At the API level, I don't see the the basic Authentication creditials request, so I'm basically trying everything I can think of to authenticate. The keystore configuration was done as an earlier effort to automated the x.509 authentication, but was put on hold in favor of getting tests created over basic auth first. (see below example URI and the responses I've gathered) Example: GET https://<FQDN>/otm-console/controllers/SelectZone/json Fail Response using Test Step (redirect options "on"): HTTP/1.1 200 OK Date: Wed, 09 Oct 2019 21:54:45 GMT Server: JBoss-EAP/7 Strict-Transport-Security: max-age=600 X-Powered-By: Undertow/1 X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes Last-Modified: Sat, 05 Oct 2019 01:48:26 GMT Content-Type: text/html Content-Length: 2898 Access-Control-Allow-Origin: * Keep-Alive: timeout=15, max=100 Connection: Keep-Alive <html style="min-width: 600px; overflow: initial"> <head> <style id="antiClickjack">body{display:none !important;}</style> </head> <body style="min-width: 600px; overflow: initial"> <link rel="stylesheet" href="vendor/css/bootstrap.min.css" crossorigin="anonymous"> <link rel="stylesheet" href="css/welcome.css"> <script src="vendor/js/jquery.min.js" crossorigin="anonymous"></script> <script src="vendor/js/bootstrap.min.js" crossorigin="anonymous"></script> <script src="login_config.js" crossorigin="anonymous"></script> <script src="login.js" crossorigin="anonymous"></script> <script type="text/javascript"> if (self === top) { var antiClickjack = document.getElementById("antiClickjack"); antiClickjack.parentNode.removeChild(antiClickjack); } else { top.location = self.location; } </script> <header> <nav class="navbar navbar-default navbar-fixed-top jfd-nav-header"> <div class="header"> <div class="classBar"></div> </div> </nav> </header> <div class="container agreement-container"> <div class="agreement"> <p><h4><strong>TEXT</strong></h4></p> <p>TEXT</p> <ul> <li>Text <li>Text <li>Text <li>Text <li>Text </ul> <div class="text-center"> <button class="btn btn-primary" onClick="window.open('welcome.html', '_self'); return false;">I Accept</button> </div> </div> </div> <div class="navbar navbar-default navbar-fixed-bottom"> <div class="classBar"></div> </div> </body> </html> Other Info Gathered: If I insert a previously used JSESSIONID into the header the response is: HTTP/1.1 401 Unauthorized Server=JBoss-EAP/7 Strict-Transport-Security=max-age=600 WWW-Authenticate=Basic realm="HAB" X-Powered-By=Undertow/1 Content-Type=text/html;charset=UTF-8 Content-Length=114 Set-Cookie=JSESSIONID=abcdefghijklmnopqurtuvReadMe.avf-d-hab; path=/hab Access-Control-Allow-Origin= Success Response using Endpoint Explorer: HTTP/1.1 200 OK Date=Wed, 09 Oct 2019 21:53:05 GMT Server=JBoss-EAP/7 Strict-Transport-Security=max-age=600 X-Powered-By=Undertow/1 Content-Type=application/json Content-Length=343 Access-Control-Allow-Origin=* Keep-Alive=timeout=15, max=97 Connection=Keep-Alive {"page":1,"total":1,"records":2,"rows":[{"id":"ABC","cell":["ABC ","ABC","ABC_Default ","SQL ","POSTGRES ","ActiveMQSSL "," "," "]},{"id":"CDB","cell":["CDB ","CDB","CDB_Default ","SQL ","POSTGRES ","ActiveMQSSL "," "," "]}]} What are the potential issues that would allow Endpoint Explorer to succeed when a test step for the same URI fails? If I use the "Create Test" option using Endpoint Explorer I receive the following SoapUI Error pop-up: Could not get JDBC Connection; nested exception is org.h2.jdbc.JdbcSQLException: General error: "java.lang.NullPointerException" [50000-197]Solved3KViews0likes2CommentsHow to generate the same Bearer token as Swagger?
I have given an API which uses Basic_auth for Authentication. it requires 'username', 'password', (type:basic_auth), 'ClientId' and 'secret'. I use the Swagger UI to authenticate and it works perfectly fine: the Curl will look like this: curl -X GET --header 'Accept: application/json' --header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ik1ZR0FtX2hHeWRvYWhrSGtlcjRlaTRiTXRSUSIsImtpZCI6Ik1ZR0FtX2hHeWRvYWhrSGtlcjRlaTRiTXRSUSJ9.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.YY1CzHzWPK_E1S7y8TDrwRT0orCS9zfN-4n5pTC1zYMomkOkJOdpvmSZyrabirBeLpGi870T9H-z9ufkYX5B1bPZlQlQRAAaDPeq_pV7Gls9EPLhAK8uXK4i5jaF1aNN5hiBP6fAJZxhZnHsmUevXs6y5s9FJeVZ1vPpDfJ69d3rrTvte_2A6hEE6fpkYeZGUKRS8eTaWHSrdZh9-18FaQN4VGbCCtsHR7x-A2HMLIG8q9MWp6iu_KDJ95wOHO_tp--AER4CoGta0HrleI7CNUBz43TN-kEklmzVCODuFA7varUIAiee4Zd2PKG7MlGEdkOBA5qwoX1HhsobGOI5ZA' ' The problem is, every time the token expires, I have to come back and use the Swagger UI to authenticate, and copy the Bearer token to my app. I would like to know, how Swagger is creating it? And how could I implement it on my machine so that everytime it expires, my app creates it itself instead of getting an error and changing it? I tried many ways, but I couldn't get the Bearer token the way Swagger gets it. It only works when Swagger creates it.5.7KViews0likes2Comments