Authentication Helper version 0.26.0

Added

• Add configuration support for the wait time after Client Script Based Authentication.
• Include the Web Element being interacted with in the Client Script Based Authentication diagnostics.
• Allow to enable authentication diagnostics for Client Script and Browser Based Authentication through the GUI.
• Automation Framework errors to the Authentication Report.
• Replace TOTP token during Client Script Based Authentication.
• Include more diagnostics in Client Script and Browser Based Authentication methods.
• Improve Authentication Report:
  • Add the ID of the step to make it easier to match with extracted screenshots.
  • Include the script used by the Client Script Based Authentication.
  • Add the initiator to the HTTP Messages to know what those messages correspond to.
  • Include the tag name of the Web Element, now collecting buttons along with inputs.
• Detection of session tokens in non standard headers.
• Search for username/password fields under shadow DOMs with Browser Based Authentication.

Changed

• Warn when the recorded script used with Client Script Based Authentication does not launch a browser.
• Updated to depend on Zest add-on 48.6.0.
• Maintenance changes.
• Depend on reports 0.39.0 to include AF errors.
• Use Header Based Session Management configuration to find a better candidate authentication message with Client Script and Browser Based Authentication methods.
• Client Script authentication to refresh the page of no suitable verification URL found.
• Wait for the detection of the session method in Client Script Based Authentication method.
• Include the name of the interaction in the Client Script Based Authentication diagnostics.
• Clear fields before sending keys for Browser Based Authentication, including when using steps.
• Do not add an empty line to the start of the Other Info of Session Management Response Identified scan rule's alerts.
• Update the Client Script Based Authentication help page with the new Automation Framework scriptInline field.
• The Authentication Request Detection and Session Management Detection scan rules now skip resources (images, css, js, etc) which are unlikely to be relevant.
• The Verification Detection scan rule now skips messages that seem related to login/logout/registration functionality.
• Now depends on minimum Common Library version 1.33.0.

Fixed

• Correct descriptions of the Zest script steps in the Authentication Report.
• Fix loading/saving of Client Script Based Authentication through the GUI.
• Inject user credentials into the script when running the Client Script Based Authentication browser integration.
• Delay when recording diagnostics.
• Allow to use zero login page wait for Client Script and Browser Based Authentication methods through the GUI.
• Ensure Client Script Based Authentication method has a clean state when reauthenticating.
• Handle missing username field in Browser Based Authentication.
• Correct the processing of cookies with the same name in Header Based Session Management method.
• Correct redirection handling when checking verification URLs.
• Verification URL comparison.
• Use the session token from JSON string response.
• Do not auto configure the Header Based Session Management method with duplicated session tokens.
• Ensure that auth messages with both known and unknown Session tokens are correctly processed.
• Respect Client Script Based Authentication's Login Page Wait when authenticating in browsers (e.g. AJAX Spider).
• Correct handling of JSON arrays in the Authentication Request Identified scan rule.