When your software testing encounters an encrypted interface, is it impossible to test?

I believe that when you do interface testing at work, you will definitely encounter a scene, that is, your software, and the password is encrypted and stored.

So in this case, when we implement the interface, we start to have a headache when dealing with passwords.

Therefore, this article will use jmeter, an open source interface testing tool for java, to explain to you how jmeter completes encrypted interface requests

Prior knowledge

Before performing encryption, you need to understand 3 knowledge points:

1. Component -> Pre/Post Processor

2. What is beanshell

3. Built-in variables of beanshell

1. Component -> Pre/Post Processor

Preprocessor: This element highlights a "pre", so it is a processor before the request is made

Post-processor: This element highlights a "post", so it is a processor after the request is sent and the response is obtained

2. What is beanshell

BeanShell is a scripting language that fully complies with the Java syntax specification, and has some syntax and methods of its own.

BeanShell can execute standard Java statements and expressions, and also includes some script commands and syntax.

Simply put, we can write java code in beanshell, and then jmeter will execute these codes.

3. Beanshell built-in variables

vars: Essentially. It is a collection similar to HashMap, so vars can store and read data, and the format of the data it stores is key.value

Its usual syntax:

vars.get(string key): Get a value from the collection

vars.put(string key.string value): Pass the variable to the collection for storage

ps: It should be noted that the vars built-in variable is a local variable and cannot be used across threads! ! !

Obtain the encrypted jar package from the development office

For many test engineers with little testing experience, they are a little afraid to ask development for things.

I always feel that if I ask the development, I will be scolded by the development. Don't worry, everyone, no, as long as your request is reasonable, the development team will definitely be willing to cooperate with you.

Therefore, when you want to encrypt data, you must first find the corresponding development, and develop a jar package that provides you with an encryption method.

Because of this encryption method, only the development in the company is the clearest. Moreover, each company's encryption method is different.

Reference the jar package in jmeter

There are two ways for jmeter to reference the jar package:

1. Direct reference in the test plan