Authentication Test fails

[Michael]

Hello,

Running the Authentication Tester, ZAP fails to identify the session handling and to find a verification URL.  Below is the Diagnostics Tab output.  Tried exploring the app manually, but it fails before anything can really be navigated.

Any ideas on what may be the issue would be greatly appreciated.

------------------------------------------------------------------------------------

>>>>>
POST https://example0/ListAccounts
content-type: application/x-www-form-urlencoded
<<<
HTTP/1.1 200 OK
content-type: application/json; charset=utf-8

["token0",[]]
>>>>>
GET https://example1/
<<<
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
>>>>>
GET https://example2/ChRDaHJvbWUvMTI0LjAuNjM2Ny42MRJRCbTmrF5B_mW2EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_IbjyBhz3kidQ
<<<
HTTP/1.1 200 OK
content-type: text/plain
>>>>>
GET https://example2/ChRDaHJvbWUvMTI0LjAuNjM2Ny42MRIgCW6cTvWGnze4EgUNNDfTKxIFDdzkyiwh0KTMr-mEIXI=
<<<
HTTP/1.1 200 OK
content-type: text/plain
>>>>>
GET https://example2/ChRDaHJvbWUvMTI0LjAuNjM2Ny42MRJfCRcE1NXtx7ThEgUNNDfTKxIFDdzkyiwSBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8hRoEDMSVmQiASIAlunE71hp83uBIFDTQ30ysSBQ3c5MosIUaBAzElZkIgElEJtOasXkH-ZbYSBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8hRoEDMSVmQiA=
<<<
HTTP/1.1 200 OK
content-type: text/plain
>>>>>
GET https://example2/ChRDaHJvbWUvMTI0LjAuNjM2Ny42MRJ7CVfyHwfcqhQ4EgUNNDfTKxIFDdzkyiwSBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ2BkPF8EgUNlJCS-hIFDZSQkvoSBQ2RYZVOISpss_jqykvvEiAJbpxO9YafN7gSBQ00N9MrEgUN3OTKLCEqbLP46spL7xJRCbTmrF5B_mW2EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_ISpss_jqykvvEi4J7YNqocsmkPYSBQ2BkPF8EgUNlJCS-hIFDZSQkvoSBQ2RYZVOISpss_jqykvv
<<<
HTTP/1.1 200 OK
content-type: text/plain
>>>>>
GET https://example2/ChRDaHJvbWUvMTI0LjAuNjM2Ny42MRKJAQmRw8at5aJjPBIFDTQ30ysSBQ3c5MosEgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNgZDxfBIFDZSQkvoSBQ2UkJL6EgUNkWGVThIFDYGQ8XwSBQ2BkPF8IdAeEIVZfYneEiAJbpxO9YafN7gSBQ00N9MrEgUN3OTKLCHQHhCFWX2J3hJRCbTmrF5B_mW2EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_IdAeEIVZfYneEjwJ4r7IXlraGsESBQ2BkPF8EgUNlJCS-hIFDZSQkvoSBQ2RYZVOEgUNgZDxfBIFDYGQ8Xwh0B4QhVl9id4=
<<<
HTTP/1.1 200 OK
content-type: text/plain
>>>>>
POST https://example3/v1:GetModels
content-type: application/x-protobuf
<<<
HTTP/1.1 200 OK
content-type: application/x-protobuf

------------------------------------------------------------------------------------

Thank You,

Michael

[Simon Bennetts]

See https://www.zaproxy.org/docs/authentication/ :)