CODEWITHSUNDEEP
reactjsauth0owaspzap
Paul
Paul

Reputation: 247

OWASP ZAP with React SPA and Auth0 - not crawling all pages

I want to automate ZAP logging in to my application with auth0

My application home page i.e. http://example.com redirects to auth0 where there is a login page.

I have created a login context using "authentication tester" which passed. When I run my site with the context using ajax spider it doesn't seem to crawl all pages/API requests. All I see is home page and various other static files or 3rd party site. Why won't it click through the site and trigger API requests with more content etc? Or is it just not logging in like it did with authentication tester.

Upvotes: -4

Views: 29

Answers (1)

Simon Bennetts
Simon Bennetts

Reputation: 6242

Can you use the ZAP desktop? If so try running the AJAX spider with a non headless browser and then you will see what its doing. For ZAP specific support the ZAP User Group is a better option ;)

Upvotes: 0

Related Questions