Authentication Profiles

Manage OAuth, API keys, AWS Sig V4, and more per project.

What It Does

Authentication Profiles let you configure and reuse auth credentials across your test suite without hardcoding secrets. Support for OAuth 1.0a/2.0, API keys, AWS Signature V4, Basic Auth, Hawk, and custom headers — all managed securely per project. OAuth 2.0 profiles handle automatic token acquisition, refresh, and rotation across Authorization Code, Client Credentials, Password, and Implicit grant types. Credentials are encrypted at rest, excluded from shared reports, and masked in execution logs. When using the Local Runner, credentials are stored in the OS keychain via Keytar for additional security.

Authentication profiles configuration supporting OAuth, API keys, AWS Sig V4, and custom auth per project

Overview

Configure reusable authentication profiles for OAuth 1.0a/2.0, API keys, Basic Auth, Bearer tokens, Hawk Auth, and AWS Signature V4. Apply profiles to individual tests, entire test packs, or all tests in a project without hardcoding credentials. Credentials are stored securely and never exposed in test definitions, shared reports, or execution logs. OAuth 2.0 profiles support all grant types including Authorization Code, Client Credentials, and Password grants with automatic token refresh. The Local Runner uses OS-level Keytar integration for even more secure credential storage on desktop.

Key Capabilities

OAuth 1.0a and 2.0 with automatic token management and refresh
API Key (Bearer, header, query parameter) with rotate-on-expiry
AWS Signature V4 for AWS API Gateway and Lambda testing
Basic Auth, Hawk Auth, custom headers, and certificate-based auth
Credentials stored securely — never exposed in reports or logs
Per-project profiles with inheritance to test packs and individual tests

How It Works

  1. 1

    Create an auth profile in your project settings with the authentication type

  2. 2

    Configure credentials, token endpoints, scopes, and grant types

  3. 3

    Apply the profile to individual tests, test packs, or the entire project

  4. 4

    Credentials are encrypted at rest and masked in all reports and logs

  5. 5

    OAuth tokens are automatically refreshed before expiry during test execution

Available on

All Plans

Included in the free trial — no credit card required.

Included in all plans
See pricing →

Try Auth Profiles Today

Start your 15-day free trial — no credit card required.