Dout in Form based Authentication

[Akhil h]

Dear Friends,

My name is Akhil, and i have  dout on "Form based Authentication."   

I will repoduce  the  steps  for more convenience:

Step 1: We capture the  post request

Step 2: Then  click right button , and select the "Flag as context."

Step 3: Select "context   name" have  you  add  in context.

Step 4:  (This session has my dout in URL) ---> Credential are  Requesting  through API , and it has port number 3030 to connect the server.

But the current URL Website has different parmas  as ===> https://yyy/login
credential passing through  Api Url  is ==> https://yyy:3030/onboarding/login

Please ensure the target url and  url to get the login page?

Step 5: Select "User" option , and enter the "valid username" and "valid password."

Step 6: Ensure the forced user  dropdown field to select the particular option (have u entered in " user" session).

Step 7: On main page, select the "manual explorer." in Url field, User enter the  navigation path (https://yyy/dashboard)  ==>(it will skip authentication page and navigate to the dashboard page )


Issues: When the user run the zap, it displays Authentication failed   message on output session; it not navigating to dashboard session 

Dout in  "Step 4." is mentioned above.

How to resolve this ....

[Simon Bennetts]

This does not appear to have anything to do with the HUD.

Its also been asked on https://groups.google.com/g/zaproxy-users/c/AugtDiSUitg/m/22erc4MVBAAJ - please dont ask the same question on different ZAP groups.

Simon