search

usebruno / bruno

Opensource IDE For Exploring and Testing Api's (lightweight alternative to postman/insomnia)
https://www.usebruno.com/
MIT License
25.61k stars 1.17k forks source link

Add SSL keylogfile support for advanced network troubleshooting #2037

Open skyhirider opened 5 months ago

skyhirider commented 5 months ago

Bruno could support SSLKEYLOGFILE so that network monitoring and troubleshooting tools like Wireshark could be used with it.

Use case: I was setting up oauth credentials and the requests were failing. The window in Bruno did not show me the request and response flow as it was inside the authentication tab, so I had no way to properly troubleshoot. I needed to know the exact url that was queried as well as the payload and server response, but it was nowhere to be found.

I figured I could intercept the traffic via Wireshark like I can do with Chrome via the SSLKEYLOGFILE that allows the intercepted traffic to be decrypted locally so that I can inspect what is going wrong.

Nope, Bruno dues not support that even thou it is running Chrome version 106.

Is this something that could be added or enabled? Maybe its just one switch you need to toggle in Electron.

PushpenderSaini0 commented 5 months ago

Even i had similar issue with the oauth , were you using client credential ?

It was a small fix that has been merged here !

Also if you wish to examine the calls made by bruno i think something like wireshark is overkill.

You could easily use a proxy and debug your traffic there, i have used this to fix the auth issue above !

skyhirider commented 5 months ago

For me the issue was that I put in the url with the unique oauth string a the and as well, and Bruno was probably appending it again. Would be an easy fix if I could see what request was sent and which url was used, but there was no way to find it. Resorted to Wireshark in the end, but that did not help as I could not decrypt the message either. Was by dumb luck I tried a shorter url. Wasted time on this, time I could have spend on something else :(

PushpenderSaini0 commented 5 months ago

You can use a simple proxy tool like https://httptoolkit.com/ as a proxy to check what calls are being made by bruno.