Class AuthFlowRunner

Namespace

Kuestenlogik.Bowire.Security.Scanner

Assembly

Kuestenlogik.Bowire.Security.Scanner.dll

Runs an AuthFlowDefinition headlessly (#190): executes each step, substitutes {{var}} (earlier captures) and {{env.NAME}} (process environment — where secrets live) into the requests, extracts the configured token, and returns a ready-to-inject auth header. No browser, so it covers the CI-relevant grants (client-credentials, password, and any scriptable login → token chain).

public static class AuthFlowRunner

Inheritance

object

AuthFlowRunner

Inherited Members

object.GetType()

object.MemberwiseClone()

object.ToString()

object.Equals(object)

object.Equals(object, object)

object.ReferenceEquals(object, object)

object.GetHashCode()

Methods

Load(string)

Load a flow definition from disk.

public static AuthFlowDefinition Load(string path)

Parameters

path string

Returns

AuthFlowDefinition

Parse(string)

Parse a flow definition from JSON.

public static AuthFlowDefinition Parse(string json)

Parameters

json string

Returns

AuthFlowDefinition

RunAsync(AuthFlowDefinition, HttpClient, CancellationToken)

Execute the flow and return the captured token + a Name: value header line to inject. Throws AuthFlowException on any misconfiguration or when no token is captured (fail closed — a scan against an authenticated API must not silently proceed unauthenticated).

public static Task<AuthFlowResult> RunAsync(AuthFlowDefinition flow, HttpClient http, CancellationToken ct)

Parameters

flow AuthFlowDefinition

http HttpClient

ct CancellationToken

Returns

Task<AuthFlowResult>