microsoft / restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
MIT License
2.62k stars 303 forks source link

Authentication #907

Open prafagr opened 3 months ago

prafagr commented 3 months ago

Description

How to ensure that a) engine_setting.json file reads the updated token from a file which is updated at a regular cadence. b) the above token value is updated to a specific header in a request.

Currently, it appears that the token value is sent as part of every request: a) For those requests where the header is not present in grammar.py file there the header is added b) For those requests where the header is present in grammar.py file then two headers are sent