Behind Barrier Sites

DDHAPT uses the SOAP API to communicate with the Secret Server. There are three kinds of requests:

• Authenticate: Uses the login credentials from conf/prod.conf and is sent before both of the other request.

• AddSecret: This is triggered when saving login credentials to a Watched Target in the user interface.

• GetSecret: There is a REST endpoint in DDHAPT for asking for passwords.

    GET /secret/{secret ID}
  

  The secret ID is an integer and is included in the crawl feeds.

  DDHAPT works like a proxy and sends a SOAP request to the Secret Server. Afterwards DDHAPT extracts the main information and sends a JSON object in response to the first request.

  Example:

    {
    "url":"https://example.com/login",
    "username":"user1",
    "password":"testpassword"
    }