## Problem Some forms of API authentication combine portions of the HTTP request with a secret. Recently we have had several customers request this feature, a workaround exists using the legacy configuration file and a deprecated version of Python 2.7. This is not optimal as customers must manually upgrade the configuration file if changes are made, such as adding a new check. ## Proposal To provide better support, two changes are being proposed: 1. [X] Add a new variable `DAST_API_PER_REQUEST_SCRIPT` allowing a user to provide the filename for a script. The contents of the script will be merged into the configuration file provided by `worker-entry` to API Security. 1. [X] Replace IronPython with C# Scripting to work around `Span<>` limitations 1. [ ] Document the new variable and functionality 1. [x] Provide one or more demo projects