Skip to content

Jenkin-ZAP plugin is not able to find the cas-auth.js #108

@asitroy09

Description

@asitroy09

I have followed the instruction provided in https://groups.google.com/forum/#!topic/zaproxy-scripts/a7Tv8VE5C4Q for configuring ZAP for auto log in and successfully ran the active scan but while configuring it with Jenkin following issue is encountered. Please help
ZAP vesrion: 2.7.0
[ZAP Jenkins Plugin] INITIALIZATION [ SUCCESSFUL ]

[ZAP Jenkins Plugin] LOAD SESSION AT: [ D:\WebInspect Alternative\Jenkins\workspace\DAST_ZAP_GOUTAM\IUX-Session-Goutam-20180619.session ]
3801 [ZAP-ProxyThread-2] INFO hsqldb.db..ENGINE - dataFileCache commit start
3830 [ZAP-ProxyThread-2] INFO hsqldb.db..ENGINE - dataFileCache commit end
3886 [ZAP-ProxyThread-2] INFO hsqldb.db..ENGINE - Database closed
4030 [ZAP-ProxyThread-2] INFO hsqldb.db..ENGINE - open start - state not modified
4045 [ZAP-ProxyThread-2] INFO hsqldb.db..ENGINE - dataFileCache open start
4050 [ZAP-ProxyThread-2] INFO hsqldb.db..ENGINE - dataFileCache open end
4327 [ZAP-ProxyThread-2] INFO org.zaproxy.zap.authentication.ScriptBasedAuthenticationMethodType - Loaded script:cas-auth-gtm
5127 [ZAP-ProxyThread-2] INFO org.parosproxy.paros.control.Control - Session file opened

[ZAP Jenkins Plugin] CREATE NEW CONTEXT [ iux_11 ]

[ZAP Jenkins Plugin] INCLUDE IN CONTEXT
[ https://inbbrdssvm131.india.tcs.com:8443/energy-cas/login ]
[ https://inbbrdssvm131.india.tcs.com:8443/IUX-Energy/maindashboard ]
[ https://inbbrdssvm131.india.tcs.com:8443/IUX-Energy/streetLightOptimizationHome ]

[ZAP Jenkins Plugin] EXCLUDE FROM CONTEXT

[ZAP Jenkins Plugin] ALERT FILTERS: [ None ]

[ZAP Jenkins Plugin] AUTHENTICATION ENABLED [ TRUE ]
[ZAP Jenkins Plugin] AUTHENTICATION MODE [ SCRIPT_BASED ]

[ZAP Jenkins Plugin] SCRIPT BASED AUTH SET AS: scriptName=cas-auth-gtm.js&loginUrl=https%3A%2F%2Flinproxy.fan.workers.dev%3A443%2Fhttps%2Finbbrdssvm131.india.tcs.com%3A8443%2Fenergy-cas%2Flogin&protectedPages=https%3A%2F%2Flinproxy.fan.workers.dev%3A443%2Fhttps%2Finbbrdssvm131.india.tcs.com%3A8443%2FIUX-Energy%2Fmaindashboard%2Chttps%3A%2F%2Flinproxy.fan.workers.dev%3A443%2Fhttps%2Finbbrdssvm131.india.tcs.com%3A8443%2FIUX-Energy%2FstreetLightOptimizationHome&Username=admin_user&Password=Password%401

[ZAP Jenkins Plugin] LOAD SCRIPT FOR AUTHENTICATION
5402 [ZAP-ProxyThread-7] ERROR org.zaproxy.zap.authentication.ScriptBasedAuthenticationMethodType - Unable to find script while loading Script Based Authentication Method for name: cas-auth-gtm.js
5403 [ZAP-ProxyThread-7] WARN org.zaproxy.zap.extension.api.API - Bad request to API endpoint [/xml/authentication/action/setAuthenticationMethod/] from [127.0.0.1]:
No script with the provided name has been found (script_not_found) : cas-auth-gtm.js
at org.zaproxy.zap.authentication.ScriptBasedAuthenticationMethodType$1.handleAction(ScriptBasedAuthenticationMethodType.java:733)
at org.zaproxy.zap.extension.authentication.AuthenticationAPI.handleApiAction(AuthenticationAPI.java:173)
at org.zaproxy.zap.extension.api.API.handleApiRequest(API.java:431)
at org.parosproxy.paros.core.proxy.ProxyThread.processHttp(ProxyThread.java:456)
at org.parosproxy.paros.core.proxy.ProxyThread.run(ProxyThread.java:317)
at java.lang.Thread.run(Thread.java:745)
ERROR: org.zaproxy.clientapi.core.ClientApiException: No script with the provided name has been found
at org.zaproxy.clientapi.core.ApiResponseFactory.getResponse(ApiResponseFactory.java:32)
at org.zaproxy.clientapi.core.ClientApi.callApi(ClientApi.java:312)
at org.zaproxy.clientapi.gen.Authentication.setAuthenticationMethod(Authentication.java:78)
at org.jenkinsci.plugins.zap.ZAPDriver.setUpScriptBasedAuth(ZAPDriver.java:1526)
at org.jenkinsci.plugins.zap.ZAPDriver.setUpAuthentication(ZAPDriver.java:1715)
at org.jenkinsci.plugins.zap.ZAPDriver.executeZAP(ZAPDriver.java:1184)
at org.jenkinsci.plugins.zap.ZAPBuilder$ZAPDriverCallable.invoke(ZAPBuilder.java:448)
at org.jenkinsci.plugins.zap.ZAPBuilder$ZAPDriverCallable.invoke(ZAPBuilder.java:436)
at hudson.FilePath$FileCallableWrapper.call(FilePath.java:2665)
at hudson.remoting.UserRequest.perform(UserRequest.java:121)
at hudson.remoting.UserRequest.perform(UserRequest.java:49)
at hudson.remoting.Request$2.run(Request.java:324)
at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:68)
at java.util.concurrent.FutureTask.run(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at hudson.remoting.Engine$1$1.run(Engine.java:63)
at java.lang.Thread.run(Unknown Source)

[ZAP Jenkins Plugin] SHUTDOWN [ START ]

6713 [Thread-7] INFO hsqldb.db..ENGINE - dataFileCache commit start
7043 [Thread-7] INFO hsqldb.db..ENGINE - dataFileCache commit end
7207 [Thread-7] INFO hsqldb.db..ENGINE - Database closed
7310 [Thread-7] INFO org.zaproxy.zap.extension.api.CoreAPI - OWASP ZAP 2.7.0 terminated.

[ZAP Jenkins Plugin] SHUTDOWN [ SUCCESSFUL ]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions