Authentication

5 Topics

Creating virtual service using swagger definition (swagger.Json) URL failing
i am trying to create a virtual service using an existing swagger definition (swagger.json) file but unfortunately it's failing with the error "could not import a definition from the specified file" though user name and password provided. when i have checked the ReadyAPI log seeing an error " Thu Jun 04 23:39:18 EDT 2020: INFO: 443 requires authentication with the realm '/ charset=UTF-8' Thu Jun 04 23:39:44 EDT 2020: INFO: 443 requires authentication with the realm '' Note: intentionally not sharing the API definition swagger.json URL. Thank you, Mannam
Solved
Mannam
5 years ago Place ReadyAPI Questions
2.1KViews
0likes
2Comments
No Community Help with SAML 2 Config Posts. Can some provide an example of SAML(XML) 2 in SoapUI?
I'm having difficulty configuring SAML authentication using SoapUI Pro and I've read many similar posts in Open Source community; however, they go unanswered. For example, "Could some give a sample example of SAML(XML) in SoapUI WS configuration" and "Enveloped Signature for SAML (XML) WSS Entry". SmartBear's page doesn't provide an example SAML(XML) Assertion. Collaborator has a page that goes into some depth to help the customer, but not SoapUI OS or Pro. We use ForgeRock's OpenAM to setup SAML and I think I’ve gleaned as much as I can from it. For instance, XML Canonicalization algorithm, XML digest algorithm, XML signature algorithm, ID Token Signing Algorithms supported, ID Token Encryption Algorithms supported, Circle of Trust, etc.; however, there’s no 1-for-1 match between what OpenAM provides that SoapUI Pro asks for. I've asked our DevOps/Integration teams for a SAML(XML) Assertion, but they haven't been able to accommodate, yet. Could someone give a sample example of SAML(XML) in SoapUI WS configuration? Regards,
Solved
socaltester
5 years ago Place ReadyAPI Questions
3.9KViews
0likes
6Comments
Basic Auth and Endpoint Explorer
I'm slightly embarassed to post this, but I'm currently stumped on the issue. Question: What are the potential issues that would allow Endpoint Explorer to succeed when a test step for the same URI fails? Basically, while using Endpoint Explorer I get a proper and successful response from an API that requires basic authentication while it fails in a test step. I was using Endpoint Explorer to troubleshoot the authentication issue at the time I succeeded in receiving a proper response message. The last thing I had configured, and I know this may seem odd, was Outgoing and Incoming WS-Security Configurations. I have even configured the Keystore, the Username and Password in the Request Properties, and the Auth Basic (Built-in) Authorization tab. At the API level, I don't see the the basic Authentication creditials request, so I'm basically trying everything I can think of to authenticate. The keystore configuration was done as an earlier effort to automated the x.509 authentication, but was put on hold in favor of getting tests created over basic auth first. (see below example URI and the responses I've gathered) Example: GET https://<FQDN>/otm-console/controllers/SelectZone/json Fail Response using Test Step (redirect options "on"): HTTP/1.1 200 OK Date: Wed, 09 Oct 2019 21:54:45 GMT Server: JBoss-EAP/7 Strict-Transport-Security: max-age=600 X-Powered-By: Undertow/1 X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes Last-Modified: Sat, 05 Oct 2019 01:48:26 GMT Content-Type: text/html Content-Length: 2898 Access-Control-Allow-Origin: * Keep-Alive: timeout=15, max=100 Connection: Keep-Alive <html style="min-width: 600px; overflow: initial"> <head> <style id="antiClickjack">body{display:none !important;}</style> </head> <body style="min-width: 600px; overflow: initial"> <link rel="stylesheet" href="vendor/css/bootstrap.min.css" crossorigin="anonymous"> <link rel="stylesheet" href="css/welcome.css"> <script src="vendor/js/jquery.min.js" crossorigin="anonymous"></script> <script src="vendor/js/bootstrap.min.js" crossorigin="anonymous"></script> <script src="login_config.js" crossorigin="anonymous"></script> <script src="login.js" crossorigin="anonymous"></script> <script type="text/javascript"> if (self === top) { var antiClickjack = document.getElementById("antiClickjack"); antiClickjack.parentNode.removeChild(antiClickjack); } else { top.location = self.location; } </script> <header> <nav class="navbar navbar-default navbar-fixed-top jfd-nav-header"> <div class="header"> <div class="classBar"></div> </div> </nav> </header> <div class="container agreement-container"> <div class="agreement"> <p><h4><strong>TEXT</strong></h4></p> <p>TEXT</p> <ul> <li>Text <li>Text <li>Text <li>Text <li>Text </ul> <div class="text-center"> <button class="btn btn-primary" onClick="window.open('welcome.html', '_self'); return false;">I Accept</button> </div> </div> </div> <div class="navbar navbar-default navbar-fixed-bottom"> <div class="classBar"></div> </div> </body> </html> Other Info Gathered: If I insert a previously used JSESSIONID into the header the response is: HTTP/1.1 401 Unauthorized Server=JBoss-EAP/7 Strict-Transport-Security=max-age=600 WWW-Authenticate=Basic realm="HAB" X-Powered-By=Undertow/1 Content-Type=text/html;charset=UTF-8 Content-Length=114 Set-Cookie=JSESSIONID=abcdefghijklmnopqurtuvReadMe.avf-d-hab; path=/hab Access-Control-Allow-Origin= Success Response using Endpoint Explorer: HTTP/1.1 200 OK Date=Wed, 09 Oct 2019 21:53:05 GMT Server=JBoss-EAP/7 Strict-Transport-Security=max-age=600 X-Powered-By=Undertow/1 Content-Type=application/json Content-Length=343 Access-Control-Allow-Origin=* Keep-Alive=timeout=15, max=97 Connection=Keep-Alive {"page":1,"total":1,"records":2,"rows":[{"id":"ABC","cell":["ABC ","ABC","ABC_Default ","SQL ","POSTGRES ","ActiveMQSSL "," "," "]},{"id":"CDB","cell":["CDB ","CDB","CDB_Default ","SQL ","POSTGRES ","ActiveMQSSL "," "," "]}]} What are the potential issues that would allow Endpoint Explorer to succeed when a test step for the same URI fails? If I use the "Create Test" option using Endpoint Explorer I receive the following SoapUI Error pop-up: Could not get JDBC Connection; nested exception is org.h2.jdbc.JdbcSQLException: General error: "java.lang.NullPointerException" [50000-197]
Solved
socaltester
6 years ago Place ReadyAPI Questions
3KViews
0likes
2Comments
How to retrieve a value from the request header?
Hi All, I have a service sending below request headers to my virt. I want to store the value of theoauth_callback present under Authorization header, highlighted in red and store this in a property and then use it in a subsequent response. { 'Connection': 'keep-alive', 'Accept': '*/*', 'Content-Length': '0', 'Accept-Encoding': 'gzip, deflate', 'Authorization': 'OAuth oauth_nonce="123123123123123", oauth_timestamp="12312312123", oauth_version="1.0", oauth_signature_method="HMAC-SHA1", oauth_consumer_key="XXXXXXXXXXX", oauth_callback="http%3A%2F%2Flocalhost%3YYYYYYYYY", oauth_signature="AAAAAAAAAAAA"' } How can i store this value? Using below, i am able to store the value of authorization header, however, i can'tfind a way to get theoauth_callback value. def acceptEncodingHeaderList = mockRequest.getRequestHeaders().get("Authorization") Thank You.
ServiceV
8 years ago Place ReadyAPI Questions
2.9KViews
0likes
1Comment
NTLM Security no longer worki in v 1.2 nd 1.3
HI, we are a paid subscriber of ready API and more specifically soap ng pro. Since v 1.2 we have not been able to a single request to a web service and get a successful authentication using NTLM. the same project imported into v1.1 and the free version works and autenticates perfectly. Has something changes in v1.2 and 1.3 as we can no longer authenticate. Very frustrating an v1.1 seems to just crash after large test scripts, seems like it had a memory leak? and we cant upgrade as it no longer supports NTLM for us. Has something changed?
Cookg
10 years ago Place ReadyAPI Questions
1.6KViews
0likes
2Comments