security

17 Topics

Avoid exfiltering OAuth Credentials in Git Repository
Hi, I am using ReadyAPI to test an OAuth2.0 secured API. I am using a Composite project with Git integration and I do not see how could I make use of Auth Manager without exfiltering my OAuth credentials into Git in plaintext, as part of the settings.xml file, within con:oAuth2ProfileContainer and con:oAuth20AuthEntry I tried using client-id and client-secret as encrypted properties, but as soon as the groovy script sets them in the profile, they appear in clear text in the settings.xml file.
Solved
morehendrix
4 years ago Place ReadyAPI Questions
1.1KViews
1like
3Comments
11.3 Community version turns on external authentication
We have tried to upgrade to 11.3, but can't login. It returns an error message: com.smartbear.ccollab.service.api.v7001.ServiceException: This version of the product doesn't support external authentication External authentication has obviously never been setup, and we have tried reinstalling with no success. We have had to rollback to 11.2 due to this issue.
mwall
7 years ago Place Collaborator Questions
1.9KViews
1like
4Comments