Practice: Correlate a Login Flow End-to-End

username,password,expected_name
user1@test.com,Password@1,User One
user2@test.com,Password@2,User Two
user3@test.com,Password@3,User Three
user4@test.com,Password@4,User Four
user5@test.com,Password@5,User Five

Test Plan: Login Flow Exercise
├── User Defined Variables
│   ├── BASE_URL = your-app.example.com
│   ├── PROTOCOL = https
│   └── PORT = 443
│
└── Thread Group (5 threads, 10s ramp-up, 2 loops)
    ├── HTTP Cookie Manager
    ├── HTTP Request Defaults
    │   (Server: ${BASE_URL}, Protocol: ${PROTOCOL}, Port: ${PORT})
    ├── CSV Data Set Config: login_users.csv
    │
    ├── Transaction Controller: "Login Flow"
    │   ├── GET /login
    │   │   └── Regex Extractor: csrf_token
    │   │       Regex: name="_csrf" value="(.+?)"
    │   │       Default: CSRF_NOT_FOUND
    │   ├── Debug Sampler (after CSRF extraction)
    │   │
    │   ├── POST /api/login
    │   │   Body: {"username":"${username}","password":"${password}","_csrf":"${csrf_token}"}
    │   │   └── JSON Extractor: auth_token
    │   │       JSONPath: $.token
    │   │       Default: TOKEN_NOT_FOUND
    │   └── Debug Sampler (after login)
    │
    ├── HTTP Header Manager
    │   └── Authorization: Bearer ${auth_token}
    │
    ├── Constant Timer: 2000ms
    │
    ├── Transaction Controller: "Profile Verification"
    │   ├── GET /api/profile
    │   │   └── Response Assertion
    │   │       Contains: ${expected_name}
    │   └── Debug Sampler (after profile)
    │
    ├── View Results Tree (disable for load test!)
    └── Summary Report

// Add as JSR223 Assertion under POST /api/login
// Validates the entire correlation chain before proceeding

def errors = []

// Check CSRF was extracted
def csrf = vars.get("csrf_token")
if (csrf == null || csrf == "CSRF_NOT_FOUND") {
    errors.add("CSRF token not extracted from login page")
}

// Check auth token was returned
def token = vars.get("auth_token")
if (token == null || token == "TOKEN_NOT_FOUND") {
    errors.add("Auth token not found in login response (code: ${prev.getResponseCode()})")
}

// Check CSV data is populated
def username = vars.get("username")
if (username == null || username.isEmpty()) {
    errors.add("CSV username not populated -- check CSV Data Set Config")
}

if (!errors.isEmpty()) {
    AssertionResult.setFailure(true)
    AssertionResult.setFailureMessage(
        "Correlation validation failed:\n" + errors.join("\n")
    )
    log.error("Thread ${ctx.getThread().getThreadName()}: ${errors.join(', ')}")
}