Bright Authentication Recorder

Bright’s authentication recorder is a simple utility that assists practitioners in setting the authentication object for the scanning flow. The idea is to start a recording session in the background. The user performs a regular login flow, and Bright captures all actions in the background to be re-played later during the scan automation. Below are the details of how to perform this activity.

To record your login session, follow these steps:

1. Open the Authentications tab on the left menu and click +Create authentication:

   

2. Specify the required details: enter your Authentication name (this name aims to provide context when selected later while defining a discovery or a scan). Select a Project from the available projects and a Reapeater, if needed:

   

3. Enter the target's address in the Protected resource details section to proceed:

   

4. Select the next tab in the flow called Auth flow setup. In the Authentication type field, select the Recorded browser-based form authentication:

   
   

5. Select the Record with Bright option and click the Authentication Recorder button:

   

   📘

   Note

   When you first run Authentication Recorder, your browser may request permission to access your clipboard. Grant the permission to proceed.

   
   

6. After the Authentication Recorder is started, you'll see the window to operate with:

   

   The navigation is simple as in any other browser: use the address bar to access web pages, the arrows to go forward and backward, and the reload button to refresh the page.

   👍

   The recording will start automatically when the browser window appears

Use the buttons in the bottom right corner of the window to control the Authentication Recorder:

• Restart - to close the current session and automatically create a new one.
• Save - to stop the recording and return to the authentication settings.

💻

MacOS users

To paste the text within the Authentication Recorder window, use the Control + V shortcut, instead of the Command+V.

7. After finishing the authentication process, click the Save button to stop the Authentication Recorder. Once the saving is done, the recording will be attached to the authentication:

   

To learn about how to edit or delete the recorded session, see the article.