Struct FlowStep 

pub struct FlowStep {
    pub operation: String,
    pub extract: Vec<ExtractField>,
    pub use_values: HashMap<String, String>,
    pub use_body: Option<String>,
    pub merge_body: HashMap<String, Value>,
    pub inject_attacks: bool,
    pub attack_types: Vec<String>,
    pub description: Option<String>,
}

A single step in a CRUD flow

Fields

operation: String

The operation identifier (e.g., “POST /users” or operation_id)

extract: Vec<ExtractField>

Fields to extract from the response (for subsequent steps) Supports multiple formats:

• Simple: “uuid” (extracts uuid, stores as uuid)
• Aliased: {field: “uuid”, as: “pool_uuid”} (extracts uuid, stores as pool_uuid)
• Full body: {body: true, as: “vs_body”, exclude: [“_last_modified”]}

use_values: HashMap<String, String>

Mapping of path/body variables to extracted values Key: variable name in request, Value: extracted field name

use_body: Option<String>

Use a previously extracted body as the request body for this step The value should match the ‘as’ name from a previous body extraction

merge_body: HashMap<String, Value>

Merge/override fields in the extracted body before sending Works with use_body to modify specific fields in the extracted body Example: merge_body: {enabled: false, name: “updated-name”}

inject_attacks: bool

Inject security attack payloads into this step’s request When true, security payloads from wafbench or configured attacks will be injected

attack_types: Vec<String>

Specific attack types to inject (if not all) Examples: “sqli”, “xss”, “rce”, “lfi”

description: Option<String>

Optional description for this step

Implementations

impl FlowStep

pub fn new(operation: String) -> Self

Create a new flow step

pub fn with_extract(self, fields: Vec<String>) -> Self

Add fields to extract from response (simple field names)

pub fn with_extract_fields(self, fields: Vec<ExtractField>) -> Self

Add fields to extract with aliases

pub fn with_values(self, values: HashMap<String, String>) -> Self

Add value mappings for this step

pub fn with_use_body(self, body_name: String) -> Self

Use a previously extracted body as the request body

pub fn with_merge_body(self, merge: HashMap<String, Value>) -> Self

Merge/override fields in the extracted body

pub fn with_inject_attacks(self, inject: bool) -> Self

Enable security attack injection for this step

pub fn with_attack_types(self, types: Vec<String>) -> Self

Specify which attack types to inject

pub fn with_description(self, description: String) -> Self

Add a description

Trait Implementations

impl Clone for FlowStep

fn clone(&self) -> FlowStep

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FlowStep

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for FlowStep

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for FlowStep

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.