Test POST request to Gateway with SoapUI

Skip to Content

Actions

Test POST request to Gateway with SoapUI

January 11, 2015 | 2,674 Views |

Lars Hvam

more by this author

SAP Gateway

csrf csrf token gateway odata rest soapui

This blog describes how to make POST calls containing CSRF tokens to Gateway using SoapUI.

The testcase contains 3 steps, and a property named CSRF,

Check field “Maintain HTTP session” under testcase options, this will make sure that the cookies set in the GET request are reused in the POST request,

1: Get CSRF

This will fetch the token via a GET request, add header “X-CSRF-Token” and value “Fetch”

2: Groovy Script

The script will take the token from the GET request and store it in the testcase “CSRF” property

”

def headerValue = testRunner.testCase.getTestStepByName(“Get CSRF”).httpRequest.response.responseHeaders[“x-csrf-token”];

log.info( headerValue[0] );

testRunner.testCase.setPropertyValue( “CSRF”, headerValue[0] );

”

3: POST

The actual request using the token, add header “X-CSRF-Token” with value “${#TestCase#CSRF}”, set content type according to input data

To report this post you need to login first.

6 Comments

You must be Logged on to comment or reply to a post.

Ilya Shatskikh March 23, 2015 at 9:59 am

Thanks, good article. But why headerValue[0] ? Only first char.

like (0)
1. Lars Hvam Post authorMarch 23, 2015 at 11:22 am
  
  its the first entry in the array containing a string value
  
  like (0)
  1. Ilya Shatskikh March 23, 2015 at 11:33 am
    
    In my situation I had the first character. No matter.
    
    like (0)
    1. Lars Hvam Post authorMarch 23, 2015 at 4:55 pm
      
      Hmm, something might be broken then, below is the expected result where “GZHmg4qIi5noiw5RLUM5Nw==” is the token value
      
      like (0)
Anupama Himasagar May 14, 2015 at 9:10 am

Hi Lars,

We have tried the above for our ABAP odata for Post method ( ie Batch create ).

We are not getting any response .

The required entry is not getting created in our tables.

Any special configuration needs to be maintained?

Thanks

Anupama

like (0)
swee chen November 19, 2015 at 2:39 am

Hi

Thanks for the post, but the first step is the key and could please show some more details?

In my situation, I need to login the test box at first then get the Cookies and token. The first step of request would be Post, instead of Get.

Many thanks.

Cheers

like (0)