API Authentication

[Jason Willcox]

Hi,

New to ZAP, have been using BurpSuite but looking to switching to ZAP.  I'm currently running into a blocker with API authentication.

Below is what was required to be completed in BurpSuite, how do I set the same in ZAP?

apiKeyHeader
Type - API Key / Custom token (Fixed)
Add to - Header
Name - Ocp-Apim-Subscription-Key
Key - ######################

apiKeyQuery
Type - API Key / Custom token (Fixed)
Add to - Query parameter
Name - subscription-key
Key - #######################

I added Ocp-Apim-Subscription-Key as a header under Session Management in the context using Header-based Session Management.

Any help appreciated

Thanks

Jason

[Simon Bennetts]

Hiya Jason,

See https://www.zaproxy.org/docs/getting-further/authentication/handling-auth-yourself/

Cheers,

Simon