Authz0 v1.1 Released 🎉

Hi security engineers and hackers! Authz0 v1.1.0 has been released 🎉 First of all, I would like to thank many of you for your good feedback.

Summary

Now, we can add credentials to the template using the setCred command.

authz0 setCred target.yaml -n User1 -H "X-Token: abvcddf"
authz0 setCred target.yaml -n User2 -H "X-Token: bbbbbb"

Once added, can check it on the template like this.

credentials:
- rolename: User1
  headers:
  - 'X-Token: abvcddf'
- rolename: User2
  headers:
  - 'X-Token: bbbbbb'

The added credentials information is used in the scan.

authz0 scan target.yaml

+> Tetst to User1, User2

authz0 scan target.yaml -r User3 -H "X-Token: bbaaaa"

+> Tetst to User1, User2, User3

Now, we can include ZAP and Burp History, HAR File.

authz0 new --include-zap zap_history.har
authz0 new --include-burp burp_history.xml
authz0 new --include-har chrome_history.har

--include-zap flag and ZAP

We can now use multiple identical types of assertions. In the example below, we can designate two fail sizes and set the error range through margin.

authz0 new target.yaml --assert-fail-size 10 \
--assert-fail-size 550 --assert-fail-size-margin 5