Web Scenario - several steps, login into website, how to catch hidden form fields?

[scheuri]

Hi all

I am racking my brain and don't find a solution even after extending testing. I am afraid I need help from experienced people like yoursef.

There is a webseite (https://www.example.com/login) which I connect to in step 1 of a web scenario.
This website has two fields which are needed for username (called USERNAME) and password (called PASSWORD).

In Step 2 I'd like to login with username and password.
I have to send these two information to the same page (https://www.example.com/login) in order to login, additionally I have to send values of two hidden fields/variables which are send to me in step 1. Otherwise the login will not work (even with correct credentials).

The values of these two hidden fields are already send to me in step 1.

The fields/variables and values (examples) send to me in step 1:

<input type="hidden" name="TOKEN" value="ef43fc9e86e75381"></input>
<input type="hidden" name="xyz" value="/$xp2/L74zb7k2vYNpZxmBAms8JYhrA7bMUEDGf4E0N1iL8QLv6lmPgJ3RF864nbkoV2GQrDdmM7pTLJ_KNN2GBhSy_izSOo7j4s5mrMBVuCqUH9e7fv05Ta6BhE0ZmqKNHAe3Q4i3Q056XuoySJJBjx9dqIagXxvoWkpp9r2FOWFwFizs2!ZA93ada4KTHqPw3aeoqk5s9jZOqGV!L6shCEIyvj!gsfGkrBmqY4C3HH3u9P2jbbMO">

Now, for the life of me, I can't manage to save those two values in variables in step 1 in order to use them in step 2.
I am using "Variables" in the Web Scenario Step (and retrieve mode = body and headers):

{TOKEN}=regex:name="TOKEN" value="([0-9a-z])" - is unable to extract the value from response
{xyz}=regex:name="xyz" value="([a-zA-Z0-9!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?])" - not yet tested

What am I doing wrong? What would I need to do in order from those two values being extracted in step 1 and saved into a Zabbix Variable, so I can re-use them with username/password in step 2 so I can actually check the login mechanism?

Thanks so much
scheuri

[mattjan]

@scheuri have you resolve this one? I tried removing the variables and change it to required string token but still couldn't find it.