From 37e0d527f278ca059515911bb3286e9ecb4df56a Mon Sep 17 00:00:00 2001 From: arcuri82 Date: Tue, 6 Jan 2026 13:59:43 +0100 Subject: [PATCH 1/3] updated snapshot release notes --- release_notes.md | 1 + 1 file changed, 1 insertion(+) diff --git a/release_notes.md b/release_notes.md index 7cad534..ffafb91 100644 --- a/release_notes.md +++ b/release_notes.md @@ -2,6 +2,7 @@ Under development in `master` branch. +- breaking changes: refactored how _TokenHandling_ is defined in auth schema - in report, added info on _executionTimeInSeconds_ and _evaluatedHttpCalls_ # 0.1.0 From d46f5516c26a358eacdaee53b70959b57f60a738 Mon Sep 17 00:00:00 2001 From: arcuri82 Date: Tue, 6 Jan 2026 22:04:06 +0100 Subject: [PATCH 2/3] updated documentation for auth --- auth.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/auth.md b/auth.md index 1cb8bae..1af903e 100644 --- a/auth.md +++ b/auth.md @@ -111,12 +111,14 @@ auth: loginEndpointAuth: # ... other data here token: - headerPrefix="Bearer " - extractFromField = "/token/authToken" - httpHeaderName="Authorization" + extractFrom="body" + extractSelector="/token/authToken" + sendIn="header" + sendName="Authorization" + sendTemplate="Bearer {token}" ``` -What will happen here is that a fuzzer will make a POST to `/login` and then extract the field `token.authToken` from the JSON response (the entry `extractFromField` is treated as a JSON Pointer (RFC 6901)). +What will happen here is that a fuzzer will make a POST to `/login` and then extract the field `token.authToken` from the JSON response (the entry `extractSelector` is treated as a JSON Pointer (RFC 6901)). Assume for example we have `token.authToken = 123456`. In the following auth requests, then the fuzzer will make requests with HTTP header: `Authorization:Bearer 123456`. From ff6c01c9af20956f56bef2dbbe593528446ec92a Mon Sep 17 00:00:00 2001 From: arcuri82 Date: Tue, 6 Jan 2026 22:14:54 +0100 Subject: [PATCH 3/3] release 0.2.0 --- pom.xml | 4 +++- release_notes.md | 2 ++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index c6f85ba..cbb8fb3 100644 --- a/pom.xml +++ b/pom.xml @@ -5,7 +5,7 @@ com.webfuzzing commons - 0.1.1-SNAPSHOT + 0.2.0 2024 WFC @@ -108,6 +108,8 @@ 3) run: mvn -P release -DskipTests deploy + IMPORTANT: must make sure you are building with JDK 8!!! + make sure it is visible at: https://central.sonatype.com/artifact/com.webfuzzing/commons if not, check publishing status at diff --git a/release_notes.md b/release_notes.md index ffafb91..596acbb 100644 --- a/release_notes.md +++ b/release_notes.md @@ -2,6 +2,8 @@ Under development in `master` branch. +# 0.2.0 + - breaking changes: refactored how _TokenHandling_ is defined in auth schema - in report, added info on _executionTimeInSeconds_ and _evaluatedHttpCalls_