Forum Discussion

Renato_166638's avatar
Renato_166638
Icon for Nimbostratus rankNimbostratus
Sep 01, 2017

Secure Variable in request body of an HTTP AAA server in APM

Hi!

 

I am using the %{variablename} syntax to create an AAA HTTP request. The problem is that it is not being able to read custom secure variables.

 

Is it possible to call mcget with "-secure" in the request body parameter? How would be the syntax for this?

 

Thanks!

 

3 Replies

  • Hi,

     

    which secured variable do you need to read except password?

     

    when working with HTTP AAA Server, password parameter name must be set in Form Parameter For Password field.

     

    if you have more than 1 secured variable, you have tu copy it in a insecure variable

     

  • Is %{session.logon.last.password} the only secure variable parsed properly in request body?

     

    The problem is that I have to create a set of parameters parsing the data that comes in the password field, bot only one of them is really secret. Maybe if I try to reuse the session.logon.last.password to store this secret data and use it in the request body. I will try it.

     

  • Hi Renato,

    you could unsecure every secured variable within VPE by creating an unsecured copy of it.

    Variable Assign Action:

    Custom Variable: session.my.unsecure_variablename
    Security: unsecure
    Custom Expression: mcget -secure {session.my.secure_variablename}
    

    After that you can reference the unsecured content of the variable as usual via...

    %{session.my.unsecure_variablename}
    

    Cheers, Kai