ZAP Desktop - OpenAPI Jobs

[Alexis]

Hello ZAP Team and community,

After watching the ZAP Chat 11 Automation Framework Part 5 - APIs twice I'm still struggling with how "Authenticated User" is working when using the OpenAPI Job (in the Automation Tab). I'm pretty sure that it has to be defined in the Contexts but I can't see any option where I can set up the api-key.

In the video Pets Store (Swagger) is used as an example but I want to be able to use the api_key (special-key) via ZAP Desktop but I'm not able to find where I can set up that api_key.

Also are you planning to create more ZAP Chat on the Automation Framework ? It was a very instructive series and I learned a lot by watching them.

Thanks in advance for your help !

Best regards,

Alexis

[Simon Bennetts]

Hi Alexis,

You will need to define the authentication at a "higher" level, so that other jobs also use the API key.

Have a look at this guide: https://www.zaproxy.org/docs/getting-further/authentication/handling-auth-yourself/

If that doesnt make sense then just ask here.

Thanks for the feedback on the ZAP Chat series :D

We are planning more videos, so what else would you like us to cover?

Cheers,

Simon

[Alexis]

Thanks for your answer Simon. I’ll give it a try and get back to you if I’m still struggling to make it work. 

Regarding the ZAP Chat Series, I’d really like to explore the Automation Framework further. You’ve already covered authentication, but I’m really interested in diving deeper to see how authentication works when you have SSO for example. 

You've also covered API with the automation framework but I think it would be really valuable and interesting to see how you do authenticated API requests with the replacer job. 

It would also be really interesting to learn more about the scripting part while we had a brief overview when you were talking about the "delays" jobs in the Automation Framework.

Thanks again for all the support and content provided by the whole team :D.

Best regards,

Alexis