Home → Problems →

Auto Login

• Edit

Joseph Tseng

05 Jan, 2017 07:48 AM

Hi Tasos
We've try to use autologin plugin to test our webapp, but we got some problems
Root cause:
In our webapp design, three steps are necessary for login process.
1. Login with user name and password.
2. Get CSRF token from Server.
3. Append CSRF token for each html page.
If user does not follow the above steps, user cannot log in the web or forced to be logout.
But Arachni tool cannot run the step 2 and step 3 automatically and no plugin application can help to do them.
We have try other Appscan tool(like Acunetix), it can be used to record the login behaviors for step 1 to step 3,So there is no problem in this tool.

1. Support Staff 1 Posted by Tasos Laskos on 05 Jan, 2017 11:35 AM

   

   Hello,

   I'm afraid I won't be able to help without access to the webapp and a demo account.

   Cheers

   • Edit

2. Tasos Laskos closed this discussion on 05 Feb, 2017 11:13 AM.