Why I get 403 for the site request Jmeter - jmeter

I have a problem with Jmeter . When I open homepage of https://demo.nopcommerce.com/ I get 403 but for other endpoint of this site I do not get this error. Should I add cookies for such case? SOrry , I just new to it...
will be grateful for any help

I cannot reproduce your issue, perhaps you recorded some HTTP Header which shouldn't be there for not-authenticated user.
Try disabling the HTTP Header Manager which is under your request /-60 and if you will be able to get HTTP status code 200 add another HTTP Header Manager and copy the headers there one by one until you will find the one which is causing the problem.

Related

How can I resolve a 403 response code in Jmeter?

I am working with Jmeter to do load testing. I created a simple login script using BlazeMeter. Then I imported the file into Jmeter.
Whenever I try to run the script, it fails. The first problem I encounter here is that in my first http request I receive a 403 response code:
I added a cookie manager and an authorization manager to try and solve this but it is not working. I think the problem is with cors in the manager header as 403 code means that it received the petition but the access to it was denied. Do you have any suggestions on how to resolve this? I tried adding post processors but couldn't make them work. Maybe because I am a newbie to jmeter and load testing. Idk.
As per HTTP Status 403 description
The HTTP 403 Forbidden client error status response code indicates that the server understood the request but refuses to authorize it.
so most probably your request is missing some authentication context.
Your recording seems to be incomplete, you seem to be testing a GeneXus-based application and it is using AJAX_SECURITY_TOKEN header as the security parameter.
From your screenshot it seems that you're sending recorded hard-coded value, however you should design your script as follows:
Perform initial request, i.e. open login page
Extract AJAX_SECURITY_TOKEN header value using Regular Expression Extractor
Substitute this e8985.... recorded value with the JMeter Variable from the Regular Expression Extractor
Check out Using Regular Expressions to Extract Tokens and Session IDs to Variables article for more information.

Jmeter response-data giving "malformed request" error

I am doing performance testing of an e-commerce website.
After adding items to the cart it is going to the shipping page
and selecting the shipping address,after that it is proceeding for checkout
In the shipping page,it is giving the following error in the response data
{"status":400,"message":"Malformed request","additional_error":""}
Request is going POST and data as **JSON
How to resolve this error?
We don't know.
It is either a bug in your application or your HTTP Request you're sending with JMeter is really malformed and you need to fix it.
I would recommend capturing the same request to the shipping page originating from the real browser and JMeter using an external sniffer tool like Wireshark or Fiddler. The requests have to be exactly the same (apart from dynamic data which needs to be correlated). Given you send the same request you should receive the same response. Amend your request to 100% match what you see from the browser and the issue should go away.
In the 99% of cases REST requests are failing due to missing Content-Type header with the value of application/json or similar (sometimes charset has to be specified as well). You can add this (and other) headers using HTTP Header Manager

JMeter POST request is returning 200 OK instead of 302 (redirect)

I'm attempting to login to a website that uses IdentityServer with JMeter but am getting stuck at the point where I post my credentials.
If I inspect the request via fiddler, I can see that it returns a 302 with a redirect, however when I attempt to post the same request in JMeter, I get a 200 with 'Error' in the html with no details.
This is my request in JMeter....
This is the request in Fiddler....
And this is the HTML response in JMeter (200 OK)...
And this is the Fiddler response...
And this is the HTML response in Fiddler, after the redirect...
I can confirm that my JMeter variables ${COOKIE_idsrv.xsrf} and ${SignIn are populated with the correct values.
Other points to note
I have a HTTP Cookie Manager
The HTTP Manager Referer headers are set correctly
All requests are set to Follow Redirects
I retrieve all embedded resources for each request
Does anybody know what could be the issue here?
In your POST request, why do you have "signin" parameter included?. You have already added "signin" as a query parameter and it appears to be redundant and not required for the actual POST body data. Fiddler does not have it in both the places. Please check.
After much frustration it turned out the issue was due to ${COOKIE_idsrv.xsrf} not containing the correct value for idsrv.xsrf. Once I changed this to pull it from a previous request it seemed to work okay.

406 Not acceptable with Accept header any

I am trying to do DELETE http request to an API ( I don't have access to the source code of it) but the API keeps responding with 406.
I tried to put "Accept" header any but the issue still the same, I see the headers are correct.
Any help is appreciated

JMeter Internal server Error, Response Code : 500 on posting a form

JMeter Internal server Error, Response Code : 500 on posting a form.
I am trying to load test our banking application with JMeter.I have successfully logged in to the application. Now I am trying to create an accuont. Account opening form has five pages and I am getting internal server error when I post the first page of the account opening process.
I have provided all possible values which are required for posting first page (As required in the browser to make it go to next page).
I have added the Cookie manager and Header manager also.
But this fails in JMeter.
Any help will be highly appreciated.
You may need to add "Http Header Manager" user your "Http Request" which is failing.
Click on add button to add on column under "Headers stored in the Header Manager"
Add Name : Content-Type
Add value : application/json
save it and run it.
This may solve your 500 (internal server error) error problem.
The best thing is to try recording to ensure you’re not missing:
header
cookie
parameter
or any additional http request.
Read:
https://jmeter.apache.org/usermanual/jmeter_proxy_step_by_step.html

Resources