Can I make a test using a private token?

[kerrykimbrough]

From @codingsoo:

Hi, Thank you for this tool! I want to make tests for Gitlab which needs a private token. Does this tool have features for processing the private token?

[kerrykimbrough]

@codingsoo: Yes, Tcases for OpenAPI supports several security schemes provided by OpenAPI that you can use with the GitLab API. For example, using an apiKey security scheme, the GitLab private token could be transmitted in either a query parameters or a custom header. Or, using an http security schema, the private token could be transmitted in a standard Authorization: Bearer header.

But TFOA starts with an OpenAPI definition of your API. So the main question is this: how are security requirements defined in the OpenAPI definition for GitLab?

[kerrykimbrough]

@codingsoo: Looking at the GitLab OpenAPI definition here, I see that this API uses an apiKey security schema, using a Private-Token header. This is supported by TFOA. For details on how the private token is provided to the generated tests, look here.