JMeter Plugins

Collection of plugins in this repository:

• HMAC function
• Decode JWT token function
• JWT encode function that transform set of claims into JWT token
• Assert JWT Token

What Missing

• Unit Test, since JMeterTestCase is not distributed in ApacheJMeter_core.jar
• JWTGenerator JavaRequest sampler not yet implemented, maybe JWTSampler can fill the gap
• JWT Token Assertion not yet implemented
• Function jwtCreate with ECDSA key not yet implemented

HMAC Function

A JMeter function that give HMAC value with given parameters:

• message to be hashed
• key to hash the message
• algorithm function to choose, which is optional

Examples

 ${__HMAC(hello,secret,HmacSHA1,)}
 ${__jwtDecode(eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c,name,,)}
 ${__jwtCreate(HS256,secret,iss:auth0\,sub:jmeter,scopes:user;operator,)}

JWT Decoder

A JMeter function that give claim value from JWT token payload, with set of given parameters:

• token encoded with format header.payload.signature
• claim name the key which is member of JSON payload

This function will decode the token without validating the token first.

Issue JWT Token

This plugins can encode a JSON payload containing claims into JWT token. EIther jwtCreate function or JWTGenerator class as Java Request can do that.

JwT Verifier

JMeter assertion that verify a token contains all required claims. Required parameters for this function:

• token encoded JWT
• verifiers comma separated claim which is pair of key and claim value, e.g.: iss:auth0,scope:operator value will validate the token contains two claims iss and scope.

Notes

• to build plugin: change to plugin directory then gradle build
• to install plugin: put the related plugins and jar files in libs into $JMETER_HOME/lib/ext
• to test the function: Options > Function Helper, then select a function in the combobox