authorization

nuclei-templates/saml-raw.yaml

@@ -5,6 +5,7 @@ info:
   severity: high
   tags: saml
 variables:
+  AUTHORIZATION: "Bearer abcd...789"
   CONFORMANCE_IDP_HOSTNAME: conformance-idp.maiv1.incubator.geant.org
   TEST_CASES:
     - noSignature
@@ -27,11 +28,13 @@ http:
         @Host: https://{{CONFORMANCE_IDP_HOSTNAME}}
         POST /module.php/conformance/test/setup?testId={{url_encode(TEST_CASE)}}&spEntityId={{url_encode(ENTITY_ID)}} HTTP/1.1
         Host: {{CONFORMANCE_IDP_HOSTNAME}}
+        Authorization: {{AUTHORIZATION}}
 
       - |
         @Host: https://{{CONFORMANCE_IDP_HOSTNAME}}
         GET /saml2/idp/SSOService.php?spentityid={{url_encode(ENTITY_ID)}}&ConsumerURL={{url_encode(BaseURL)}} HTTP/1.1
         Host: {{CONFORMANCE_IDP_HOSTNAME}}
+        Authorization: {{AUTHORIZATION}}
     disable-path-automerge: true
     extractors:
       - type: xpath