authentication.feature

@authentication
Feature: Authentication
  Verify that the authentication system is robust
[...]
  @cwe-319-auth
  Scenario: Transmit authentication credentials over HTTPS
    Given a new browser or client instance
    And the client/browser is configured to use an intercepting proxy
    And the proxy logs are cleared
    When the default user logs in
    And the HTTP request-response containing the default credentials is selected
    Then the protocol should be HTTPS