Authorization code flow - get the short-lived code to use for JMeter performance/load testing

[fong1999]

Hi! We are trying to create JMeter performance/load testing for our web application. We use authorization code flow by leveraging Azure Entra ID OIDC SSO and Apache mod_auth_openidc. The challenge is that we are not able to obtain code in the URL fragment or in the response header location header. We can use Postman to configure it but still not able to use it to pass it to the subsequent calls. We can hard-code it in the JMeter, but the short-lived code expires every quickly. Then we used JMeter to record it, but the code is hard-coded and expires.

Any suggestions? Is there a way we can get the code from the back-channel?

Thanks!