OpenAPI Swagger Import

216 views
Skip to first unread message

Greg Fischer

unread,
Mar 19, 2019, 5:41:43 PM3/19/19
to OWASP ZAP User Group
I'm having trouble importing an Open Api specification file into Zap using the OpenApi extension.  I keep receiving the error below:

2019-03-19 14:48:06,128 WARN  ExtensionOpenApi - io.swagger.models.properties.StringProperty cannot be cast to io.swagger.models.properties.RefProperty
java
.lang.ClassCastException: io.swagger.models.properties.StringProperty cannot be cast to io.swagger.models.properties.RefProperty
    at org
.zaproxy.zap.extension.openapi.converter.swagger.RequestModelConverter.generateBody(RequestModelConverter.java:79)
    at org
.zaproxy.zap.extension.openapi.converter.swagger.RequestModelConverter.convert(RequestModelConverter.java:49)
    at org
.zaproxy.zap.extension.openapi.converter.swagger.SwaggerConverter.convertToRequest(SwaggerConverter.java:83)
    at org
.zaproxy.zap.extension.openapi.converter.swagger.SwaggerConverter.getRequestModels(SwaggerConverter.java:77)

I'm importing a OpenApi v2.0 spec directly via the swagger site using the Zap UI.  I downloaded the file and attached an excerpt of it for reference.  Any help would be appreciated.
swagger1.json

Andre Guerra

unread,
Mar 20, 2019, 5:51:44 AM3/20/19
to OWASP ZAP User Group
The error message seems related to type casting error (when you try to convert one value into a class type object). My previous experiences with swagger files is that it sometimes ill formatted. I’d suggest opening your swagger json file in a text editor and verifying if that’s the case. You can manually fix it depending on how bad it looks. I suggest using VSCode and a json beautifier to get it nicely formated for you to review.
Reply all
Reply to author
Forward
0 new messages