OAuth 1.0 with JMeter
OAuth (short for "Open Authorization"[1][2]) is an open standard for access delegation, commonly used as a way for internet users to grant websites or applications access to their information on other websites but without giving them the passwords
OAuth 1.0
On 23 April 2009, a session fixation security flaw in the 1.0 protocol was announced. It affects the OAuth authorization flow (also known as "3-legged OAuth") in OAuth Core 1.0 Section 6.[11] Version 1.0a of the OAuth Core protocol was issued to address this issue.[12]
OAuth 2.0
In January 2013, the Internet Engineering Task Force published a threat model for OAuth 2.0.[13] Among the threats outlined is one called "Open Redirector"; in early 2014, a variant of this was described under the name "Covert Redirect" by Wang Jing.[14][15][16][17]
Reference : https://en.wikipedia.org/wiki/OAuth
#jmeter #oauth #testing #securitytesting