Re: [W3af-develop] Authenticated scan support for x-access-token

2015-08-05 Thread Andres Riancho
@John: Awesome! Since Jay mentioned that he might work on this, I believe we'll have to wait and see if he's able to write the code; but something very important that's always required for a feature to be accepted in w3af is a functional test. Our functional tests are part of the django-moth [0] a

Re: [W3af-develop] Authenticated scan support for x-access-token

2015-08-05 Thread John Martinelli
I can help with this On Aug 5, 2015 4:41 PM, "Andres Riancho" wrote: > Jay, > > Interesting subject, never came across JSON web tokens before. > > AFAIK nobody is working on adding this feature to the framework, > but I would be happy if you give it a try. There seems to be a library > we

Re: [W3af-develop] Authenticated scan support for x-access-token

2015-08-05 Thread Andres Riancho
Jay, Interesting subject, never came across JSON web tokens before. AFAIK nobody is working on adding this feature to the framework, but I would be happy if you give it a try. There seems to be a library we can use to handle all the encoding stuff [0] and some notes on the w3af-specifics: