Introduction

Errors encountered when uploading Puppeteer login recording files often arise from unnecessary or invalid actions captured during the recording process. These extra entries can prevent the Scan-Based Login (SBL) feature from navigating your application correctly. Cleaning these files ensures that the Astra scanner can successfully authenticate and map protected areas of your target.

Prerequisites

• Administrative Access: You must be a super admin to upload these files, as they are critical to scan execution and only specific users are granted this permission.

• File Format: Ensure the file was exported as a JSON file from the Chrome DevTools recorder.

• Text Editor: You will need a code or text editor (such as VS Code or Sublime Text) to modify the recording.

Instructions: Cleaning Your Recording File

If you face issues during upload or scan execution, follow these steps to "clean" the file:

1. Open the File for Review: Download the login recording file you attempted to upload and open it in your text editor.

2. Remove Browser-Internal Pages: Locate and delete any entries that point to internal browser URLs, such as "url": "chrome://new-tab-page/".

3. Remove Meta Key Events: Search for and delete any keyDown or keyUp events associated with the Meta key, as these are unnecessary for the scan and often cause failures.

   • Example entries to delete: { "type": "keyDown", "key": "Meta" } and { "type": "keyUp", "key": "Meta" }.

4. Clean the Final Step: Navigate to the very last step of the recording. Locate the assertedEvents array and delete only the array content, not the entire step.

   • Target for deletion: "assertedEvents": [ ... ].

5. Save and Re-upload: Save your changes to the JSON file, return to the Astra dashboard, and re-upload the cleaned file in Step 4 (Login Recording) of the scanner setup.

Expected Outcome

Once the cleaned file is successfully uploaded and the setup is finalized, the target status will change to Active. The scanner will now be able to replay the recorded sequence to reach the authenticated sections of your application without encountering invalid event errors.

Troubleshooting & Support

• Scan Still Fails: If the login still fails after cleaning, check if your application is protected by a WAF or Cloudflare, which may require IP whitelisting for the scanner to connect.

• Latency Issues: If your application loads slowly, you may need to manually add pause statements (custom steps) into the JSON code before specific elements to allow the page time to render.

• Further Assistance: If you remain unsure how to clean the file or continue to face issues, raise a support ticket from your Astra dashboard for technical assistance.