I created A Katalon API/Web Services project and needed to encode a security “Key”. I created a test object and under the “HTTP Header” added the Name/Value combination for the attributes. The Value was hard coded. I then ran the code and it produced the expected results. I then created a Test C…

I found this code snippet that seems to answer my original question: import com.kms.katalon.util.CryptoUtil def originalText = ‘mypassword’ println(“Original text: ${originalText}”) def encryptedText = CryptoUtil.encode(CryptoUtil.getDefault(originalText)) println(“Encrypted text: ${encryptedT…

But wouldn’t a Windows “Environment Variable” be non-encrypted? And if I would store the security key as an encrypted variable, I would still need to unencrypt it in Katalon - right? And that’s what I’m having a problem with.

[image] em817m: How do I let the Katalon Object know the “Key” is encoded data? how would you like to tell Katalon to decode it, prior to use it?

[image] gdearest07: Whatever is encrypted can de decripted. Woudn’t it be safer to store a security key in some environment variable? you gave yourself the answer, using environment variable is not safe. use an external vault to store sensitive data and pass such only at runtime to katalon

Thanks, @anon46315158 . Sounds like a plan (the only little devil in the details is how, the hell, to do it)) To be precise, how exactly to store sensitive data both locally and, for example, in the (external) Jenkins and to be able to pass them (the word ‘data’ is plural) at runtime to Katalon wh…

[image] gdearest07: To be precise, how exactly to store sensitive data both locally and, for example, in the (external) Jenkins and to be able to pass them this is a matter of trust. you can store them in jenkins vault as global credentials, provided you trust all jenkins user, or under a pro…

Sure. I was just asking how to pass the sensitive data at runtime to Katalon from local and external storage so it can be used by the same script code

Yes, this is what I was after from the beginning - sort of. First, how do I pass this data and second, if I encode it, how do I get Katalon to decode it in the script…

you can pass whatever data needed at runtime through global variables, regardless where such are stored, no need to store them with the project, encrypted or not

[image] gdearest07: Sure. I was just asking how to pass the sensitive data at runtime to Katalon from local and external storage so it can be used by the same script code have you ever read the docs? e.g: https://docs.katalon.com/docs/katalon-runtime-engine/command-syntax-command-lineconsole-…

Thanks, @anon46315158 . A couple of questions: 1) [image] anon46315158: if the above does not suit to your needs, you can set them as environment variables and retrieve from your code with System.getEnv() but you wrote: [image] anon46315158: using environment variable is not safe. …

API/Web Service Encoded Variables

Web Testing

anon46315158 September 21, 2022, 5:56pm 21

@gdearest07 side note, currently the katalon jenkins plugin is blacklisted by jenkins development team due to various licencing / vulnerabilities issues.
google about…

1 Like

Topic		Replies	Views
Keep passwords secret in katalon studio not using encrypt text tool Web Testing katalon-studio	13	2823	June 21, 2022
Encryption on Katalon Web Testing katalon-studio	4	308	March 12, 2024
Set Encrypted Text as Variable in Execution Profile Integrations integrations , katalon-studio	6	5936	August 25, 2018
[KShare] Avoid leaking sensitive information from Global Variables (Execution Profiles) Kshare start-page , katalon-studio , support , variables , gatedknowledge , linh-nguyen , thong-tran	2	670	March 12, 2024
Encrypt values from Excel Web Testing katalon-studio	9	1726	April 1, 2020

API/Web Service Encoded Variables

Related topics