Support for digest authentication

microsoft / restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

MIT License

2.59k stars 297 forks source link

Support for digest authentication #336

Open Anudeep541 opened 3 years ago

Anudeep541 commented 3 years ago

When a authentication type of DIGEST mentioned in RFC7235 https://datatracker.ietf.org/doc/html/rfc7235 is provided in OpenAPI Specification (supported as mentioned at https://swagger.io/docs/specification/authentication/ ) it is not compiled to RESTler grammar and the REST APIs are fuzzed without the mentioned authentication. Is the Digest authentication supported by RESTler Fuzzer?

marina-p commented 3 years ago

Hello @Jane2197,

This authentication type is not supported at this time and is not on our near-term road map. Contributions are welcome, marking it as help-wanted.

Thanks,

Marina