meta {
  name: Sign-In - username
  type: http
  seq: 4
}

post {
  url: http://{{url}}/lst/api/auth/sign-in/username
  body: json
  auth: inherit
}

body:json {
  {
    "username": "matthes01",
    "password": "nova0511"
  }
}

script:post-response {
  // grab the raw Set-Cookie header
  const cookies = res.headers["set-cookie"];
  
  // cookies is usually an array, e.g. ["auth_session=abcd123; Path=/; HttpOnly; Secure; SameSite=Lax"]
  
  // Extract just the value part ("auth_session=abcd123")
  const sessionCookie = cookies[0].split(";")[0];
  
  // Save it as an environment variable
  bru.setEnvVar("session_cookie", sessionCookie);
}

settings {
  encodeUrl: true
}