Tests dynamiques de sécurité (DAST) sous OWASP Zap avec authentification via JWT/bearer token (OpenID Connect/OAuth & Kong)

login.py

import time 

def sendingRequest(msg, initiator, helper):
    accessToken = GlobalVariables.getGlobalCustomVar(ACCESS_TOKEN)

    # Token KO ou expiré
    if accessToken is None or tokenHasExpired():
        login()
        
    #Token OK
    setTokenInRequest(msg)
    
    
def tokenHasExpired(accessToken):
    accessTokenCreation = GlobalVariables.getGlobalCustomVar(ACCESS_TOKEN_CREATION);

    currentTime = time.time();
    difference = currentTime - accessTokenCreation;

    accessTokenExpiryInSeconds = GlobalVariables.getGlobalCustomVar(ACCESS_TOKEN_EXPIRY);
    if difference > accessTokenExpiryInSeconds:
        print "token expiré"
        return True;
    else:
      print "token OK"
      return False;