I am trying to do Performance Testing Using JMeter over Password Encrypted website, the detail scenario is as follows,
The website uses a password Encryption algorithm such as, 1. Client send a request 2. Server Authenticate the request and send a random key 3. The random key is interpreted by client & it process it with password 4. Client send encrypted password to server 5. The sever Authenticate & if validate it set user cookies in browser 6. The cookie is validated in all request send to sever after login for validation
My question here, while preforming Load / Performance testing using Jmeter.
- I could not perform the operation for by-passing authentication or generate client encrypted password.
- Is the any technique / process where I can perform such operations??? or is there any way such that browser set cookies can be track & injected in the call send through JMeter eg. regular expression for sending CSRF Token ,if yes please let me know.
- The failure of such operation would not help in calculating the performance of site because for every call in jmeter the user is set to be invalid as it could not found proper cookies set in browser