如何在MaxSoft IntelliAPI Framework中保存登录Token以授权其他API请求？

Got it, let's walk through how to implement this login flow with the MaxSoft IntelliAPI Framework— I’ve used this framework for API automation before, so here’s a practical, step-by-step approach that works:

First, you’ll need to build and send the login POST request, then extract the token from the successful response. Here’s a concrete code example:

public void performLoginAndStoreToken() {
    // 1. Build your login request payload (adjust the JSON structure to match your API)
    String loginRequestBody = "{\"username\":\"test_user\",\"password\":\"test_pass123\"}";

    // 2. Send the POST request to your login endpoint
    Response loginResponse = ApiRequestHandler.sendPostRequest("https://your-api-domain/auth/login", loginRequestBody);

    // 3. Verify the login request was successful (adjust status code if your API uses a different one)
    Assert.assertEquals(loginResponse.getStatusCode(), 200, "Login request failed unexpectedly");

    // 4. Extract the access token from the response (update the JSON path to match your API's response structure)
    String accessToken = loginResponse.jsonPath().getString("data.access_token");

    // 5. Store the token in MaxSoft's global data holder for reuse
    TestDataHolder.setData("AUTH_TOKEN", accessToken);
}

MaxSoft IntelliAPI provides the TestDataHolder class to share data across test methods or test classes. You can retrieve the token from this holder and add it to the authorization header of subsequent requests:

public void fetchUserProfile() {
    // 1. Retrieve the stored access token
    String authToken = TestDataHolder.getData("AUTH_TOKEN");

    // 2. Set up the authorization header (adjust the auth scheme if your API uses Basic Auth instead of Bearer)
    Map<String, String> requestHeaders = new HashMap<>();
    requestHeaders.put("Authorization", "Bearer " + authToken);

    // 3. Send the authenticated GET request
    Response profileResponse = ApiRequestHandler.sendGetRequest("https://your-api-domain/users/profile", requestHeaders);

    // 4. Validate the response status
    Assert.assertEquals(profileResponse.getStatusCode(), 200, "Failed to fetch user profile with authenticated token");
}

• Adjust JSON Paths: Make sure the jsonPath().getString() parameter matches exactly where your API returns the access token (e.g., some APIs return it directly under access_token instead of data.access_token).
• Auth Scheme: If your API uses a different authorization method (like API keys in headers), modify the header key-value pair accordingly.
• Test Execution Order: Ensure the login method runs before any authenticated API tests—you can use test annotations (like @BeforeClass in TestNG) to enforce this order.

内容的提问来源于stack exchange，提问作者Gayanjani Gamage