Uploading recorded login data

This REST service uploads the manual explore data that is stored in an *.htd / *.har / *.dast.config file as a recorded login sequence to a content scan job, and sets the Login Method for the content scan job to "Recorded Login".

This service replaces any existing login sequences with the uploaded login sequence. The size of the traffic file should not exceed 20 MB. If your application uses Platform Authentication (NTLM), you must set the authentication options separately by using the REST service documented in Setting Basic and NTLM authentication options for scanning an application. To use the files in *.har or *.dast.config file formats, an additional parameter format is to be passed into the request. Examples provided below.

HTTP method


Service format


Query string parameters


Deletes all Recorded Login URLs and the domains. Changes the Login Method to "None" if the current Login Method is "Recorded Login".


Provides data stored in the *.har file to the REST APIs.


Provides data stored in the *.dast file to the REST APIs.

POST data

Content-Type: application/octet-stream

Contents of the file.
Note: Specify the POST data if the query parameter "delete=1" is not provided.


A successful upload status or an error message such as:
  • Invalid *.htd file
  • File size is larger than 20 MB
  • User is unauthorized
  • Job ID is invalid
  • Job is created by using properties from AppScan Standard scan template file (*.scant file)
  • The template for a QuickScan job does not have "Manual Explore" selected as the option for the QuickScan Explore Methods option.

Refer to documented schema for more details.