[Selenium] Add Auth Capability to use Credentials

[mwiegand]

Hi @qqilihq,

do you believe it is possible to use credentials collected i.e. via the Credentials Widget:

Credentials Widget

To send the user and pass? I haven’t fully thought this though in terms of security but I suppose the weak point is entering the data into fields which could be intercepted anyway.

Best
Mike

[qqilihq]

Dear Mike,

could you please clarify in which node you’d like to use these? How would the desired flow look like?

Many thanks,
Philipp

[mwiegand]

Good morning Philipp,

the semi functional setup looks like so:

Provide Credentails

Insert Credentials

The send keys for the user works. Though, I extracted the provided user name. The find node with the comment “To be replaced” should theoretically be a Send keys node to send the password.

However, for security reasons, it might be necessary to create a dedicated node to send credentials in a more secure manner (just guess work atm.).

Best
Mike

[qqilihq]

Hi Mike,

I had a brief look into this and will consider this a “won’t do” for now. Reasons:

1. The “Credentials” term seems quite overloaded in KNIME land, yet underdocumented.

2. Credentials as combination of username and password cannot easily be mapped to Send Keys which always targets a single input.

3. “Send Keys” will inherently send all input unencrypted, unobfuscated - associating this with the term “credentials” might lead to invalid assumptions by end users (see 1.)

4. “Send Keys” cannot guarantee that a password input actually ends up in a “password” field (see 3.) and even if, their input values can easily be revealed within the browser.

Thus I think, plain string variables are the appropriate way here.

If I’m missing anything, I’m open for any further input!

-Philipp

[mwiegand]

Hi Philipp,

yes, I fully agree. There is no point in passing the credentials if it ain’t in a save manner.

Cheers
Mike