Regarding the issue of browserBasedAuthentication authentication, please advise

81 views
Skip to first unread message

guanggang long

unread,
Jan 19, 2026, 2:34:59 AM (5 days ago) Jan 19
to ZAP User Group
Hello!

I use Java SDK:
<dependency>
<groupId>org.zaproxy</groupId>
<artifactId>zap-clientapi</artifactId>
<version>1.17.0</version>
</ dependency  >

docker version:  zaproxy/zap-stable:2.17.0
command:  docker run -u zap -p 8090:8090 -i zaproxy/zap-stable zap-x.sh -daemon -host 0.0.0.0 -port 8090 -config api.addrs.addr.name=.* -config api.addrs.addr.regex=true  -config api.key=123456
chrome version:

chrome:  
ScreenShot_2026-01-19_123126_688.png

chromeAras:
ScreenShot_2026-01-19_115545_343.png

browserBasedAuthentication code:
ScreenShot_2026-01-19_122826_812.png



Error message:

4561 [ZAP-daemon] INFO  org.zaproxy.addon.network.ExtensionNetwork - ZAP is now listening on 0.0.0.0:8090
21688 [ZAP-IO-Server-1-1] INFO  org.zaproxy.zap.users.User - Authenticating user: admin
29364 [ZAP-IO-Server-1-5] INFO  org.zaproxy.zap.users.User - Authenticating user: admin
30652 [ZAP-IO-Server-1-1] ERROR org.zaproxy.zap.users.User - An error occurred while authenticating:
org.openqa.selenium.WebDriverException: unknown error: net::ERR_PROXY_CONNECTION_FAILED
  (Session info: chrome=143.0.7499.193)
Build info: version: '4.39.0', revision: '126f156aee'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '5.4.0-150-generic', java.version: '17.0.17'
Driver info: org.openqa.selenium.chrome.ChromeDriver
Command: [f3c618f8357bc494eb29904e97053283, get {url=http://192.168.11.124/login}]
Capabilities {acceptInsecureCerts: true, browserName: chrome, browserVersion: 143.0.7499.193, chrome: {chromedriverVersion: 143.0.7499.193 (fc6af963ede..., userDataDir: /tmp/.org.chromium.Chromium...}, fedcm:accounts: true, goog:processID: 149, networkConnectionEnabled: false, pageLoadStrategy: normal, platformName: linux, proxy: Proxy(manual, http=localhos..., setWindowRect: true, strictFileInteractability: false, timeouts: {implicit: 0, pageLoad: 300000, script: 30000}, unhandledPromptBehavior: dismiss and notify, webSocketUrl: ws://localhost:11198/sessio..., webauthn:extension:credBlob: true, webauthn:extension:largeBlob: true, webauthn:extension:minPinLength: true, webauthn:extension:prf: true, webauthn:virtualAuthenticators: true}
Session ID: f3c618f8357bc494eb29904e97053283
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77)
at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:500)
at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:481)
at org.openqa.selenium.remote.ErrorCodec.decode(ErrorCodec.java:167)
at org.openqa.selenium.remote.codec.w3c.W3CHttpResponseCodec.decode(W3CHttpResponseCodec.java:142)
at org.openqa.selenium.remote.codec.w3c.W3CHttpResponseCodec.decode(W3CHttpResponseCodec.java:49)
at org.openqa.selenium.remote.HttpCommandExecutor.execute(HttpCommandExecutor.java:215)
at org.openqa.selenium.remote.service.DriverCommandExecutor.invokeExecute(DriverCommandExecutor.java:216)
at org.openqa.selenium.remote.service.DriverCommandExecutor.execute(DriverCommandExecutor.java:174)
at org.openqa.selenium.remote.RemoteWebDriver.execute(RemoteWebDriver.java:561)
at org.openqa.selenium.remote.RemoteWebDriver.get(RemoteWebDriver.java:329)
at org.zaproxy.addon.authhelper.AuthUtils.authenticateAsUserImpl(AuthUtils.java:502)
at org.zaproxy.addon.authhelper.AuthUtils.authenticateAsUserWithErrorStep(AuthUtils.java:480)
at org.zaproxy.addon.authhelper.BrowserBasedAuthenticationMethodType$BrowserBasedAuthenticationMethod.authenticateImpl(BrowserBasedAuthenticationMethodType.java:341)
at org.zaproxy.addon.authhelper.BrowserBasedAuthenticationMethodType$BrowserBasedAuthenticationMethod.authenticate(BrowserBasedAuthenticationMethodType.java:309)
at org.zaproxy.zap.users.User.authenticate(User.java:271)
at org.zaproxy.zap.extension.users.UsersAPI.handleApiAction(UsersAPI.java:307)
at org.zaproxy.zap.extension.api.API.handleApiRequest(API.java:538)
at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleApiRequest(ZapApiHandler.java:111)
at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleRequest(ZapApiHandler.java:85)
at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleMessage(ZapApiHandler.java:70)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.notifyMessageHandlers(MainServerHandler.java:151)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.processMessage(MainServerHandler.java:131)
at org.zaproxy.addon.network.internal.server.http.LocalServerHandler.processMessage(LocalServerHandler.java:67)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.process(MainServerHandler.java:94)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.lambda$channelRead0$0(MainServerHandler.java:82)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
at java.base/java.lang.Thread.run(Thread.java:840)
31039 [ZAP-IO-Server-1-1] INFO  org.zaproxy.zap.users.User - Authenticating user: admin
35189 [ZAP-IO-Server-1-9] WARN  org.zaproxy.zap.extension.api.API - API key incorrect or not supplied: not set in request from 127.0.0.1
35325 [ZAP-IO-Server-1-10] WARN  org.zaproxy.zap.extension.api.API - API key incorrect or not supplied: not set in request from 127.0.0.1
35325 [ZAP-IO-Server-1-9] WARN  org.zaproxy.zap.extension.api.API - API key incorrect or not supplied: not set in request from 127.0.0.1
36003 [ZAP-IO-Server-1-5] ERROR org.zaproxy.zap.extension.selenium.ExtensionSelenium - unknown error: net::ERR_PROXY_CONNECTION_FAILED
  (Session info: chrome=143.0.7499.193)
Build info: version: '4.39.0', revision: '126f156aee'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '5.4.0-150-generic', java.version: '17.0.17'
Driver info: org.openqa.selenium.chrome.ChromeDriver
Command: [a127cc065907aaaa9c1d15fcf5cd8cd4, get {url=https://zap/zapCallBackUrl/-6013776022888708683?zapenable=true}]
Capabilities {acceptInsecureCerts: true, browserName: chrome, browserVersion: 143.0.7499.193, chrome: {chromedriverVersion: 143.0.7499.193 (fc6af963ede..., userDataDir: /tmp/.org.chromium.Chromium...}, fedcm:accounts: true, goog:processID: 348, networkConnectionEnabled: false, pageLoadStrategy: normal, platformName: linux, proxy: Proxy(manual, http=localhos..., setWindowRect: true, strictFileInteractability: false, timeouts: {implicit: 0, pageLoad: 300000, script: 30000}, unhandledPromptBehavior: dismiss and notify, webSocketUrl: ws://localhost:18986/sessio..., webauthn:extension:credBlob: true, webauthn:extension:largeBlob: true, webauthn:extension:minPinLength: true, webauthn:extension:prf: true, webauthn:virtualAuthenticators: true}
Session ID: a127cc065907aaaa9c1d15fcf5cd8cd4
org.openqa.selenium.WebDriverException: unknown error: net::ERR_PROXY_CONNECTION_FAILED
  (Session info: chrome=143.0.7499.193)
Build info: version: '4.39.0', revision: '126f156aee'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '5.4.0-150-generic', java.version: '17.0.17'
Driver info: org.openqa.selenium.chrome.ChromeDriver
Command: [a127cc065907aaaa9c1d15fcf5cd8cd4, get {url=https://zap/zapCallBackUrl/-6013776022888708683?zapenable=true}]
Capabilities {acceptInsecureCerts: true, browserName: chrome, browserVersion: 143.0.7499.193, chrome: {chromedriverVersion: 143.0.7499.193 (fc6af963ede..., userDataDir: /tmp/.org.chromium.Chromium...}, fedcm:accounts: true, goog:processID: 348, networkConnectionEnabled: false, pageLoadStrategy: normal, platformName: linux, proxy: Proxy(manual, http=localhos..., setWindowRect: true, strictFileInteractability: false, timeouts: {implicit: 0, pageLoad: 300000, script: 30000}, unhandledPromptBehavior: dismiss and notify, webSocketUrl: ws://localhost:18986/sessio..., webauthn:extension:credBlob: true, webauthn:extension:largeBlob: true, webauthn:extension:minPinLength: true, webauthn:extension:prf: true, webauthn:virtualAuthenticators: true}
Session ID: a127cc065907aaaa9c1d15fcf5cd8cd4
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77)
at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:500)
at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:481)
at org.openqa.selenium.remote.ErrorCodec.decode(ErrorCodec.java:167)
at org.openqa.selenium.remote.codec.w3c.W3CHttpResponseCodec.decode(W3CHttpResponseCodec.java:142)
at org.openqa.selenium.remote.codec.w3c.W3CHttpResponseCodec.decode(W3CHttpResponseCodec.java:49)
at org.openqa.selenium.remote.HttpCommandExecutor.execute(HttpCommandExecutor.java:215)
at org.openqa.selenium.remote.service.DriverCommandExecutor.invokeExecute(DriverCommandExecutor.java:216)
at org.openqa.selenium.remote.service.DriverCommandExecutor.execute(DriverCommandExecutor.java:174)
at org.openqa.selenium.remote.RemoteWebDriver.execute(RemoteWebDriver.java:561)
at org.openqa.selenium.remote.RemoteWebDriver.get(RemoteWebDriver.java:329)
at org.zaproxy.addon.client.RedirectScript.browserLaunched(RedirectScript.java:51)
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.lambda$getWebDriverImpl$3(ExtensionSelenium.java:830)
at java.base/java.util.ArrayList.forEach(ArrayList.java:1511)
at java.base/java.util.Collections$SynchronizedCollection.forEach(Collections.java:2132)
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriverImpl(ExtensionSelenium.java:827)
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:620)
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:593)
at org.zaproxy.addon.authhelper.BrowserBasedAuthenticationMethodType$BrowserBasedAuthenticationMethod.authenticateImpl(BrowserBasedAuthenticationMethodType.java:335)
at org.zaproxy.addon.authhelper.BrowserBasedAuthenticationMethodType$BrowserBasedAuthenticationMethod.authenticate(BrowserBasedAuthenticationMethodType.java:309)
at org.zaproxy.zap.users.User.authenticate(User.java:271)
at org.zaproxy.zap.users.User.processMessageToMatchUser(User.java:170)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendAuthenticated(BaseHttpSender.java:378)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendNoRedirections(BaseHttpSender.java:351)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.send(BaseHttpSender.java:307)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendAndReceive(BaseHttpSender.java:278)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendAndReceive(BaseHttpSender.java:234)
at org.parosproxy.paros.network.HttpSender.sendImpl(HttpSender.java:536)
at org.parosproxy.paros.network.HttpSender.sendAndReceive(HttpSender.java:356)
at org.zaproxy.addon.network.internal.server.http.handlers.HttpSenderHandler.handleMessage(HttpSenderHandler.java:78)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.notifyMessageHandlers(MainServerHandler.java:151)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.processMessage(MainServerHandler.java:131)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.process(MainServerHandler.java:94)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.lambda$channelRead0$0(MainServerHandler.java:82)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
at java.base/java.lang.Thread.run(Thread.java:840)

thc202

unread,
Jan 19, 2026, 2:48:21 AM (5 days ago) Jan 19
to zaprox...@googlegroups.com
Hi,

Browsers launched by ZAP are already configured to proxy through the
correct proxy (which is different depending on the browser's usage), you
should remove the proxy-server argument which is causing the failure.

Best regards.

guanggang long

unread,
Jan 19, 2026, 3:28:11 AM (5 days ago) Jan 19
to ZAP User Group
Hello !

Let me ask again, I have removed the parameters set in the code, but the authentication still reports an error:
ScreenShot_2026-01-19_162726_842.png

zap    | org.openqa.selenium.SessionNotCreatedException: Could not start a new session. Response code 500. Message: session not created: Chrome instance exited. Examine ChromeDriver verbose log to determine the cause.
zap    | Host info: host: '30883985e470', ip: '172.19.0.2'
zap    | Build info: version: '4.39.0', revision: '126f156aee'
zap    | System info: os.name: 'Linux', os.arch: 'amd64', os.version: '5.4.0-150-generic', java.version: '17.0.17'
zap    | Driver info: org.openqa.selenium.chrome.ChromeDriver
zap    | Command: [null, newSession {capabilities=[Capabilities {acceptInsecureCerts: true, browserName: chrome, goog:chromeOptions: {args: [--proxy-bypass-list=<-loopb..., --ignore-certificate-errors, --headless=new, --enable-unsafe-extension-d..., --remote-debugging-pipe], binary: /usr/bin/chrome, extensions: []}, proxy: Proxy(manual, http=localhos..., webSocketUrl: true}]}]
zap    | at org.openqa.selenium.remote.ProtocolHandshake.createSession(ProtocolHandshake.java:114)
zap    | at org.openqa.selenium.remote.ProtocolHandshake.createSession(ProtocolHandshake.java:75)
zap    | at org.openqa.selenium.remote.ProtocolHandshake.createSession(ProtocolHandshake.java:61)
zap    | at org.openqa.selenium.remote.HttpCommandExecutor.execute(HttpCommandExecutor.java:187)
zap    | at org.openqa.selenium.remote.service.DriverCommandExecutor.invokeExecute(DriverCommandExecutor.java:216)
zap    | at org.openqa.selenium.remote.service.DriverCommandExecutor.execute(DriverCommandExecutor.java:174)
zap    | at org.openqa.selenium.remote.RemoteWebDriver.execute(RemoteWebDriver.java:561)
zap    | at org.openqa.selenium.remote.RemoteWebDriver.startSession(RemoteWebDriver.java:250)
zap    | at org.openqa.selenium.remote.RemoteWebDriver.<init>(RemoteWebDriver.java:178)
zap    | at org.openqa.selenium.chromium.ChromiumDriver.<init>(ChromiumDriver.java:109)
zap    | at org.openqa.selenium.chrome.ChromeDriver.<init>(ChromeDriver.java:88)
zap    | at org.openqa.selenium.chrome.ChromeDriver.<init>(ChromeDriver.java:83)
zap    | at org.openqa.selenium.chrome.ChromeDriver.<init>(ChromeDriver.java:72)
zap    | at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriverImpl(ExtensionSelenium.java:1083)
zap    | at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:972)
zap    | at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:940)
zap    | at org.zaproxy.zap.extension.selenium.internal.BuiltInSingleWebDriverProvider.getWebDriver(BuiltInSingleWebDriverProvider.java:63)
zap    | at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriverImpl(ExtensionSelenium.java:820)
zap    | at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:620)
zap    | at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:593)
zap    | at org.zaproxy.addon.authhelper.BrowserBasedAuthenticationMethodType$BrowserBasedAuthenticationMethod.authenticateImpl(BrowserBasedAuthenticationMethodType.java:335)
zap    | at org.zaproxy.addon.authhelper.BrowserBasedAuthenticationMethodType$BrowserBasedAuthenticationMethod.authenticate(BrowserBasedAuthenticationMethodType.java:309)
zap    | at org.zaproxy.zap.users.User.authenticate(User.java:271)
zap    | at org.zaproxy.zap.extension.users.UsersAPI.handleApiAction(UsersAPI.java:307)
zap    | at org.zaproxy.zap.extension.api.API.handleApiRequest(API.java:538)
zap    | at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleApiRequest(ZapApiHandler.java:111)
zap    | at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleRequest(ZapApiHandler.java:85)
zap    | at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleMessage(ZapApiHandler.java:70)
zap    | at org.zaproxy.addon.network.internal.server.http.MainServerHandler.notifyMessageHandlers(MainServerHandler.java:151)
zap    | at org.zaproxy.addon.network.internal.server.http.MainServerHandler.processMessage(MainServerHandler.java:131)
zap    | at org.zaproxy.addon.network.internal.server.http.LocalServerHandler.processMessage(LocalServerHandler.java:67)
zap    | at org.zaproxy.addon.network.internal.server.http.MainServerHandler.process(MainServerHandler.java:94)
zap    | at org.zaproxy.addon.network.internal.server.http.MainServerHandler.lambda$channelRead0$0(MainServerHandler.java:82)
zap    | at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
zap    | at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
zap    | at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
zap    | at java.base/java.lang.Thread.run(Thread.java:840)

guanggang long

unread,
Jan 19, 2026, 3:43:45 AM (5 days ago) Jan 19
to ZAP User Group
When using the headless mode of the Firefox browser built-in in the container, an error occurs indicating that the proxy refused the connection. The error message is as follows:

48515 [ZAP-daemon] INFO  org.zaproxy.addon.network.ExtensionNetwork - ZAP is now listening on 0.0.0.0:8080
76691 [ZAP-IO-Server-1-1] INFO  org.zaproxy.zap.users.User - Authenticating user: admin
199457 [ZAP-IO-Server-1-4] INFO  org.zaproxy.zap.users.User - Authenticating user: admin
223580 [ZAP-IO-Server-1-1] ERROR org.zaproxy.zap.users.User - An error occurred while authenticating:
org.openqa.selenium.WebDriverException: Reached error page: about:neterror?e=proxyConnectFailure&u=http%3A//192.168.11.124/login&c=UTF-8&d=Firefox%20is%20configured%20to%20use%20a%20proxy%20server%20that%20is%20refusing%20connections.
Build info: version: '4.38.0', revision: '6b412e825c*'

System info: os.name: 'Linux', os.arch: 'amd64', os.version: '5.4.0-150-generic', java.version: '17.0.17'
Driver info: org.openqa.selenium.firefox.FirefoxDriver
Command: [5a544fa0-8cda-45ba-b51f-b0490462dee5, get {url=http://192.168.11.124/login}]
Capabilities {acceptInsecureCerts: true, browserName: firefox, browserVersion: 140.6.0, moz:accessibilityChecks: false, moz:buildID: 20251201132345, moz:geckodriverVersion: 0.36.0, moz:headless: true, moz:platformVersion: 5.4.0-150-generic, moz:processID: 195, moz:profile: /tmp/rust_mozprofileru1l9K, moz:shutdownTimeout: 60000, moz:webdriverClick: true, moz:windowless: false, pageLoadStrategy: normal, platformName: linux, proxy: Proxy(), setWindowRect: true, strictFileInteractability: false, timeouts: {implicit: 0, pageLoad: 300000, script: 30000}, unhandledPromptBehavior: dismiss and notify, userAgent: Mozilla/5.0 (X11; Linux x86..., webSocketUrl: ws://127.0.0.1:44781/sessio...}
Session ID: 5a544fa0-8cda-45ba-b51f-b0490462dee5
        at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?]
        at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77) ~[?:?]
        at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?]
        at java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:500) ~[?:?]
        at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:481) ~[?:?]
        at org.openqa.selenium.remote.ErrorCodec.decode(ErrorCodec.java:167) ~[?:?]
        at org.openqa.selenium.remote.codec.w3c.W3CHttpResponseCodec.decode(W3CHttpResponseCodec.java:138) ~[?:?]
        at org.openqa.selenium.remote.codec.w3c.W3CHttpResponseCodec.decode(W3CHttpResponseCodec.java:50) ~[?:?]
        at org.openqa.selenium.remote.HttpCommandExecutor.execute(HttpCommandExecutor.java:215) ~[?:?]
        at org.openqa.selenium.remote.service.DriverCommandExecutor.invokeExecute(DriverCommandExecutor.java:216) ~[?:?]
        at org.openqa.selenium.remote.service.DriverCommandExecutor.execute(DriverCommandExecutor.java:174) ~[?:?]
        at org.openqa.selenium.remote.RemoteWebDriver.execute(RemoteWebDriver.java:557) ~[?:?]
        at org.openqa.selenium.remote.RemoteWebDriver.get(RemoteWebDriver.java:325) ~[?:?]
        at org.zaproxy.addon.authhelper.AuthUtils.authenticateAsUserImpl(AuthUtils.java:501) ~[?:?]
        at org.zaproxy.addon.authhelper.AuthUtils.authenticateAsUserWithErrorStep(AuthUtils.java:479) ~[?:?]
        at org.zaproxy.addon.authhelper.BrowserBasedAuthenticationMethodType$BrowserBasedAuthenticationMethod.authenticateImpl(BrowserBasedAuthenticationMethodType.java:341) ~[?:?]
        at org.zaproxy.addon.authhelper.BrowserBasedAuthenticationMethodType$BrowserBasedAuthenticationMethod.authenticate(BrowserBasedAuthenticationMethodType.java:309) ~[?:?]
        at org.zaproxy.zap.users.User.authenticate(User.java:271) ~[zap-2.16.1.jar:2.16.1]
        at org.zaproxy.zap.extension.users.UsersAPI.handleApiAction(UsersAPI.java:307) ~[zap-2.16.1.jar:2.16.1]
        at org.zaproxy.zap.extension.api.API.handleApiRequest(API.java:538) ~[zap-2.16.1.jar:2.16.1]
        at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleApiRequest(ZapApiHandler.java:111) ~[?:?]
        at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleRequest(ZapApiHandler.java:85) ~[?:?]
        at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleMessage(ZapApiHandler.java:70) ~[?:?]
        at org.zaproxy.addon.network.internal.server.http.MainServerHandler.notifyMessageHandlers(MainServerHandler.java:151) ~[?:?]
        at org.zaproxy.addon.network.internal.server.http.MainServerHandler.processMessage(MainServerHandler.java:131) ~[?:?]
        at org.zaproxy.addon.network.internal.server.http.LocalServerHandler.processMessage(LocalServerHandler.java:67) ~[?:?]
        at org.zaproxy.addon.network.internal.server.http.MainServerHandler.process(MainServerHandler.java:94) ~[?:?]
        at org.zaproxy.addon.network.internal.server.http.MainServerHandler.lambda$channelRead0$0(MainServerHandler.java:82) ~[?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:?]
        at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) [network-beta-0.24.0.zap:?]
        at java.base/java.lang.Thread.run(Thread.java:840) [?:?]

kingthorin+zap

unread,
Jan 19, 2026, 9:13:57 AM (4 days ago) Jan 19
to ZAP User Group
Is http://192.168.11.124/login accessible from inside the container?
It seems you're using an old image (ZAP 2.17 is out as well as network add-on 0.25.0, etc)

guanggang long

unread,
Jan 19, 2026, 10:33:38 AM (4 days ago) Jan 19
to ZAP User Group
The version I am currently using is ZAP 2.17.0, and the network plugin I am using is network-beta-0.25.0, as shown in the figure:

ScreenShot_2026-01-19_223327_372.png

Using the current Zap container's Chrome can retrieve the DOM content of a webpage:

root@ubuntu:/home/lgg/webls# docker exec -it zap google-chrome --no-sandbox --headless=new --dump-dom http://192.168.3.4/login | head -100
[1913:1939:0119/152828.109030:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[1913:1939:0119/152828.114173:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1939:0119/152828.114250:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[1913:1939:0119/152828.114418:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[1913:1939:0119/152828.122191:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1939:0119/152828.134871:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1913:0119/152828.191437:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1939:0119/152828.191614:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1939:0119/152828.191631:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1939:0119/152828.191636:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1939:0119/152828.191639:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1939:0119/152828.191641:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1913:0119/152828.191718:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1939:0119/152828.191852:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1913:0119/152828.192614:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1913:0119/152828.209424:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1913:0119/152828.209478:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1939:0119/152828.209525:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[1913:1913:0119/152828.209544:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1939:0119/152828.209993:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[1913:1913:0119/152828.234079:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type:
[1913:1939:0119/152828.275280:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1913:0119/152828.314282:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1939:0119/152828.314778:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1913:0119/152828.322722:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1939:0119/152828.322811:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1913:0119/152828.325637:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1939:0119/152828.325743:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1913:0119/152828.332651:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
[1913:1939:0119/152828.332757:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[1913:1913:0119/152828.334274:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type:
<!DOCTYPE html>
<html class="nprogress-busy"><head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
    <meta name="renderer" content="webkit">
    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
    <link rel="icon" href="/favicon.ico">
    <title>test</title>
    <!--[if lt IE 11]><script>window.location.href='/html/ie.html';</script><![endif]-->
          <style>
    html,
    body,
    #app {
      height: 100%;
      margin: 0px;
      padding: 0px;
    }
    .chromeframe {
      margin: 0.2em 0;
      background: #ccc;
      color: #000;
      padding: 0.2em 0;
    }

    #loader-wrapper {
      position: fixed;
      top: 0;
      left: 0;
      width: 100%;
      height: 100%;
      z-index: 999999;
    }

    #loader {
      display: block;
      position: relative;
      left: 50%;
      top: 50%;
      width: 150px;
      height: 150px;
      margin: -75px 0 0 -75px;
      border-radius: 50%;
      border: 3px solid transparent;
      border-top-color: #FFF;
      -webkit-animation: spin 2s linear infinite;
      -ms-animation: spin 2s linear infinite;
      -moz-animation: spin 2s linear infinite;
      -o-animation: spin 2s linear infinite;
      animation: spin 2s linear infinite;
      z-index: 1001;
    }

    #loader:before {
      content: "";
      position: absolute;
      top: 5px;
      left: 5px;
      right: 5px;
      bottom: 5px;
      border-radius: 50%;
      border: 3px solid transparent;
      border-top-color: #FFF;
      -webkit-animation: spin 3s linear infinite;
      -moz-animation: spin 3s linear infinite;
      -o-animation: spin 3s linear infinite;
      -ms-animation: spin 3s linear infinite;
      animation: spin 3s linear infinite;
    }



Strangely, using SDK to call browser authentication will result in an error, indicating that the proxy has been denied a connection:

52606 [ZAP-IO-Server-1-1] ERROR org.zaproxy.zap.users.User - An error occurred while authenticating:

org.openqa.selenium.WebDriverException: unknown error: net::ERR_PROXY_CONNECTION_FAILED
  (Session info: chrome=143.0.7499.193)
Build info: version: '4.39.0', revision: '126f156aee'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '6.8.0-90-generic', java.version: '17.0.17'
Driver info: org.openqa.selenium.chrome.ChromeDriver
Command: [ecf5dce301521baee0fadcd15a91d4ad, get {url=http://192.168.3.4/}]
Capabilities {acceptInsecureCerts: true, browserName: chrome, browserVersion: 143.0.7499.193, chrome: {chromedriverVersion: 143.0.7499.193 (fc6af963ede..., userDataDir: /tmp/.org.chromium.Chromium...}, fedcm:accounts: true, goog:processID: 194, networkConnectionEnabled: false, pageLoadStrategy: normal, platformName: linux, proxy: Proxy(manual, http=localhos..., setWindowRect: true, strictFileInteractability: false, timeouts: {implicit: 0, pageLoad: 300000, script: 30000}, unhandledPromptBehavior: dismiss and notify, webSocketUrl: ws://localhost:18021/sessio..., webauthn:extension:credBlob: true, webauthn:extension:largeBlob: true, webauthn:extension:minPinLength: true, webauthn:extension:prf: true, webauthn:virtualAuthenticators: true}
Session ID: ecf5dce301521baee0fadcd15a91d4ad

Simon Bennetts

unread,
Jan 20, 2026, 7:23:57 AM (3 days ago) Jan 20
to ZAP User Group
Lets step back for a minute and understand what you are trying to do.
It looks like you are running ZAP in daemon mode and controlling it via the API, is that right?
Have you tested the authentication in the ZAP desktop app before you used the API?
Any reason why you did not choose to use the Automation Framework?

Cheers,

Simon
Reply all
Reply to author
Forward
0 new messages