Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

added support for force_post for json parameters #1023

Merged
merged 1 commit into from Mar 22, 2024

Conversation

yudasm
Copy link
Contributor

@yudasm yudasm commented Mar 5, 2024

Added support for force_post for json parameters (supported only regular http parameters)

Useful for intercepting requests to URLs such as /common/GetCredentialType which are used to initiate Windows Hello for Business auth flow
Blog post will be published soon on this subject

The following force_post section can now alter the API post request and modify it on the fly, something that could not be done beforehand due to limitations with modifications of JSON params.

  - path: '/common/GetCredentialType'
    search:
      - {key: 'isFidoSupported', search: '.*'}
    force:
      - {key: 'isFidoSupported', value: 'false'}
    type: 'post'

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Interesting!

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fyi, just posted the research here

@kgretzky
Copy link
Owner

Thank you, Yehuda! This is an amazing addition and for sure a feature that has been missing for too long!

@kgretzky kgretzky merged commit c4a5dcb into kgretzky:master Mar 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants