org.zaproxy.clientapi.core

Class ClientApi

java.lang.Object

org.zaproxy.clientapi.core.ClientApi

public class ClientApi
extends java.lang.Object

Field Summary

Fields

Modifier and Type	Field and Description
Acsrf	acsrf
AjaxSpider	ajaxSpider
AlertFilter	alertFilter
Ascan	ascan
Authentication	authentication
Authorization	authorization
Autoupdate	autoupdate
Break	brk
Context	context
Core	core
ForcedUser	forcedUser
HttpSessions	httpSessions
Importurls	importurls
ImportLogFiles	logImportFiles
Openapi	openapi
Params	params
Pnh	pnh
Pscan	pscan
Replacer	replacer
Reveal	reveal
Script	script
Search	search
Selenium	selenium
SessionManagement	sessionManagement
Spider	spider
Stats	stats
Users	users
Websocket	websocket

Constructor Summary

Constructors

Constructor and Description
ClientApi(java.lang.String zapAddress, int zapPort)
ClientApi(java.lang.String zapAddress, int zapPort, boolean debug)
ClientApi(java.lang.String zapAddress, int zapPort, java.lang.String apiKey) Constructs a ClientApi with the given ZAP address/port and with the given API key, to be sent with all API requests.
ClientApi(java.lang.String zapAddress, int zapPort, java.lang.String apiKey, boolean debug) Constructs a ClientApi with the given ZAP address/port and with the given API key, to be sent with all API requests.

Method Summary

Modifier and Type	Method and Description
void	accessUrl(java.lang.String url)
void	activeScanSiteInScope(java.lang.String url) Active scans the given site, that's in scope.
void	activeScanSiteInScope(java.lang.String apikey, java.lang.String url) Deprecated. (1.1.0) Use activeScanSiteInScope(String) instead, the API key should be set using one of the ClientApi constructors.
void	addExcludeFromContext(java.lang.String apikey, java.lang.String contextName, java.lang.String regex) Deprecated. (1.1.0) Use Context.excludeFromContext(String, String) instead.
void	addIncludeInContext(java.lang.String apikey, java.lang.String contextName, java.lang.String regex) Deprecated. (1.1.0) Use Context.includeInContext(String, String) instead.
ApiResponse	callApi(java.lang.String component, java.lang.String type, java.lang.String method, java.util.Map<java.lang.String,java.lang.String> params)
byte[]	callApiOther(java.lang.String component, java.lang.String type, java.lang.String method, java.util.Map<java.lang.String,java.lang.String> params)
void	checkAlerts(java.util.List<Alert> ignoreAlerts, java.util.List<Alert> requireAlerts)
void	checkAlerts(java.util.List<Alert> ignoreAlerts, java.util.List<Alert> requireAlerts, java.io.File outputFile)
java.util.List<Alert>	getAlerts(java.lang.String baseUrl, int start, int count)
void	includeOneMatchingNodeInContext(java.lang.String contextName, java.lang.String regex) Includes just one of the nodes that match the given regular expression in the context with the given name.
void	includeOneMatchingNodeInContext(java.lang.String apikey, java.lang.String contextName, java.lang.String regex) Deprecated. (1.1.0) Use includeOneMatchingNodeInContext(String, String) instead.
void	setDebugStream(java.io.PrintStream debugStream)
void	waitForSuccessfulConnectionToZap(int timeoutInSeconds) Convenience method to wait for ZAP to be ready to receive API calls, when started programmatically.
void	waitForSuccessfulConnectionToZap(int timeoutInSeconds, int pollingIntervalInMs) Convenience method to wait for ZAP to be ready to receive API calls, when started programmatically.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

acsrf

public Acsrf acsrf

ajaxSpider

public AjaxSpider ajaxSpider

alertFilter

public AlertFilter alertFilter

ascan

public Ascan ascan

authentication

public Authentication authentication

authorization

public Authorization authorization

autoupdate

public Autoupdate autoupdate

brk

public Break brk

context

public Context context

core

public Core core

forcedUser

public ForcedUser forcedUser

httpSessions

public HttpSessions httpSessions

logImportFiles

public ImportLogFiles logImportFiles

importurls

public Importurls importurls

openapi

public Openapi openapi

params

public Params params

pnh

public Pnh pnh

pscan

public Pscan pscan

replacer

public Replacer replacer

reveal

public Reveal reveal

search

public Search search

script

public Script script

selenium

public Selenium selenium

sessionManagement

public SessionManagement sessionManagement

spider

public Spider spider

stats

public Stats stats

users

public Users users

websocket

public Websocket websocket

Constructor Detail

ClientApi

public ClientApi(java.lang.String zapAddress,
                 int zapPort)

ClientApi

public ClientApi(java.lang.String zapAddress,
                 int zapPort,
                 java.lang.String apiKey)

Constructs a ClientApi with the given ZAP address/port and with the given API key, to be sent with all API requests.

Parameters:

zapAddress - ZAP's address

zapPort - ZAP's listening port

apiKey - the ZAP API key, might be null or empty in which case is not used/sent.

Since:

1.1.0

ClientApi

public ClientApi(java.lang.String zapAddress,
                 int zapPort,
                 boolean debug)

ClientApi

public ClientApi(java.lang.String zapAddress,
                 int zapPort,
                 java.lang.String apiKey,
                 boolean debug)

Constructs a ClientApi with the given ZAP address/port and with the given API key, to be sent with all API requests. Also, sets whether or not client API debug information should be written to the debug stream (by default the standard output stream).

Parameters:

zapAddress - ZAP's address

zapPort - ZAP's listening port

apiKey - the ZAP API key, might be null or empty in which case is not used/sent.

debug - true if debug information should be written to debug stream, false otherwise.

Since:

1.1.0

Method Detail

setDebugStream

public void setDebugStream(java.io.PrintStream debugStream)

accessUrl

public void accessUrl(java.lang.String url)
               throws ClientApiException

Throws:

ClientApiException

checkAlerts

public void checkAlerts(java.util.List<Alert> ignoreAlerts,
                        java.util.List<Alert> requireAlerts)
                 throws ClientApiException

Throws:

ClientApiException

checkAlerts

public void checkAlerts(java.util.List<Alert> ignoreAlerts,
                        java.util.List<Alert> requireAlerts,
                        java.io.File outputFile)
                 throws ClientApiException

Throws:

ClientApiException

getAlerts

public java.util.List<Alert> getAlerts(java.lang.String baseUrl,
                                       int start,
                                       int count)
                                throws ClientApiException

Throws:

ClientApiException

callApi

public ApiResponse callApi(java.lang.String component,
                           java.lang.String type,
                           java.lang.String method,
                           java.util.Map<java.lang.String,java.lang.String> params)
                    throws ClientApiException

Throws:

ClientApiException

callApiOther

public byte[] callApiOther(java.lang.String component,
                           java.lang.String type,
                           java.lang.String method,
                           java.util.Map<java.lang.String,java.lang.String> params)
                    throws ClientApiException

Throws:

ClientApiException

addExcludeFromContext

@Deprecated
public void addExcludeFromContext(java.lang.String apikey,
                                              java.lang.String contextName,
                                              java.lang.String regex)
                                       throws java.lang.Exception

Deprecated. (1.1.0) Use Context.excludeFromContext(String, String) instead.

Adds the given regular expression to the exclusion list of the given context.

Parameters:

apikey - the API key, might be null.

contextName - the name of the context.

regex - the regular expression to add.

Throws:

java.lang.Exception - if an error occurred while calling the API.

See Also:

context

addIncludeInContext

@Deprecated
public void addIncludeInContext(java.lang.String apikey,
                                            java.lang.String contextName,
                                            java.lang.String regex)
                                     throws java.lang.Exception

Deprecated. (1.1.0) Use Context.includeInContext(String, String) instead.

Adds the given regular expression to the inclusion list of the given context.

Parameters:

apikey - the API key, might be null.

contextName - the name of the context.

regex - the regular expression to add.

Throws:

java.lang.Exception - if an error occurred while calling the API.

See Also:

context

includeOneMatchingNodeInContext

@Deprecated
public void includeOneMatchingNodeInContext(java.lang.String apikey,
                                                        java.lang.String contextName,
                                                        java.lang.String regex)
                                                 throws java.lang.Exception

Deprecated. (1.1.0) Use includeOneMatchingNodeInContext(String, String) instead.

Includes just one of the nodes that match the given regular expression in the context with the given name.

Nodes that do not match the regular expression are excluded.

Parameters:

apikey - the API key, might be null.

contextName - the name of the context.

regex - the regular expression to match the node/URL.

Throws:

java.lang.Exception - if an error occurred while calling the API.

includeOneMatchingNodeInContext

public void includeOneMatchingNodeInContext(java.lang.String contextName,
                                            java.lang.String regex)
                                     throws java.lang.Exception

Includes just one of the nodes that match the given regular expression in the context with the given name.

Nodes that do not match the regular expression are excluded.

Parameters:

contextName - the name of the context.

regex - the regular expression to match the node/URL.

Throws:

java.lang.Exception - if an error occurred while calling the API.

activeScanSiteInScope

@Deprecated
public void activeScanSiteInScope(java.lang.String apikey,
                                              java.lang.String url)
                                       throws java.lang.Exception

Deprecated. (1.1.0) Use activeScanSiteInScope(String) instead, the API key should be set using one of the ClientApi constructors.

Active scans the given site, that's in scope.

The method returns only after the scan has finished.

Parameters:

apikey - the API key, might be null.

url - the site to scan

Throws:

java.lang.Exception - if an error occurred while calling the API.

activeScanSiteInScope

public void activeScanSiteInScope(java.lang.String url)
                           throws java.lang.Exception

Active scans the given site, that's in scope.

The method returns only after the scan has finished.

Parameters:

url - the site to scan

Throws:

java.lang.Exception - if an error occurred while calling the API.

Since:

1.1.0

waitForSuccessfulConnectionToZap

public void waitForSuccessfulConnectionToZap(int timeoutInSeconds)
                                      throws ClientApiException

Convenience method to wait for ZAP to be ready to receive API calls, when started programmatically.

It attempts to establish a connection to ZAP's proxy, in the given time, throwing an exception if the connection is not successful. The connection attempts might be polled in one second interval.

Parameters:

timeoutInSeconds - the (maximum) number of seconds to wait for ZAP to start

Throws:

ClientApiException - if the timeout was reached or if the thread was interrupted while waiting

See Also:

waitForSuccessfulConnectionToZap(int, int)

waitForSuccessfulConnectionToZap

public void waitForSuccessfulConnectionToZap(int timeoutInSeconds,
                                             int pollingIntervalInMs)
                                      throws ClientApiException

Convenience method to wait for ZAP to be ready to receive API calls, when started programmatically.

It attempts to establish a connection to ZAP's proxy, in the given time, throwing an exception if the connection is not successful. The connection attempts are done with the given polling interval.

Parameters:

timeoutInSeconds - the (maximum) number of seconds to wait for ZAP to start

pollingIntervalInMs - the interval, in milliseconds, for connection polling

Throws:

ClientApiException - if the timeout was reached or if the thread was interrupted while waiting.

java.lang.IllegalArgumentException - if the interval for connection polling is negative.

See Also:

waitForSuccessfulConnectionToZap(int)