API Testing Challenges 32 - How To - unauthorized secret note 401

Опубликовано: 21 Октябрь 2024
на канале: EvilTester - Software Testing
3,383
10

How to complete the unauthorized secret note challenge, which returns a status code of 401 Unauthorized.

Issue a GET request on the `/secret/note` end point and receive 401 when no X-AUTH-TOKEN header present

`GET` request means use the HTTP Verb GET
e.g. `GET /secret/note` sends to the secret note endpoint
`no X-AUTH-TOKEN header present` means no custom header named `X-AUTH-TOKEN` should be added to the message
add the `X-CHALLENGER` header to track progress
Receive a 401 UNAUTHORIZED response because no authorization token is present

Find the application links and more information at:

https://eviltester.com/apichallenges

Write up of this challenge instructions:

https://eviltester.com/apichallenges/...

---

Remember to subscribe to this YouTube channel.

You can support me on Patreon   / eviltester   (watch my videos ad free and receive extra content)

I blog at https://eviltester.com/blog

Learn more about my books and online training at:

https://eviltester.com

Follow me on:

  / eviltester  
  / eviltester  
  / eviltester