mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2026-11-08 17:39:09 -10:00
Om
349299c9ab
An XML array example has no single root to encode, and the request still went out with no body or Content-Type. Skip it after the warning, like the default branch does for content types it cannot build.
110 lines
3.0 KiB
Go
110 lines
3.0 KiB
Go
package openapi
|
|
|
|
import (
|
|
"os"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/types"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
const baseURL = "http://hackthebox:5000"
|
|
|
|
var methodToURLs = map[string][]string{
|
|
"GET": {
|
|
"{{baseUrl}}/createdb",
|
|
"{{baseUrl}}/",
|
|
"{{baseUrl}}/users/v1/John.Doe",
|
|
"{{baseUrl}}/users/v1",
|
|
"{{baseUrl}}/users/v1/_debug",
|
|
"{{baseUrl}}/books/v1",
|
|
"{{baseUrl}}/books/v1/bookTitle77",
|
|
},
|
|
"POST": {
|
|
"{{baseUrl}}/users/v1/register",
|
|
"{{baseUrl}}/users/v1/login",
|
|
"{{baseUrl}}/books/v1",
|
|
},
|
|
"PUT": {
|
|
"{{baseUrl}}/users/v1/name1/email",
|
|
"{{baseUrl}}/users/v1/name1/password",
|
|
},
|
|
"DELETE": {
|
|
"{{baseUrl}}/users/v1/name1",
|
|
},
|
|
}
|
|
|
|
func TestOpenAPIParser(t *testing.T) {
|
|
format := New()
|
|
|
|
proxifyInputFile := "../testdata/openapi.yaml"
|
|
|
|
gotMethodsToURLs := make(map[string][]string)
|
|
|
|
file, err := os.Open(proxifyInputFile)
|
|
require.Nilf(t, err, "error opening proxify input file: %v", err)
|
|
defer func() {
|
|
_ = file.Close()
|
|
}()
|
|
|
|
err = format.Parse(file, func(rr *types.RequestResponse) bool {
|
|
gotMethodsToURLs[rr.Request.Method] = append(gotMethodsToURLs[rr.Request.Method],
|
|
strings.Replace(rr.URL.String(), baseURL, "{{baseUrl}}", 1))
|
|
return false
|
|
}, proxifyInputFile)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
if len(gotMethodsToURLs) != len(methodToURLs) {
|
|
t.Fatalf("invalid number of methods: %d", len(gotMethodsToURLs))
|
|
}
|
|
|
|
for method, urls := range gotMethodsToURLs {
|
|
if len(urls) != len(methodToURLs[method]) {
|
|
t.Fatalf("invalid number of urls for method %s: %d", method, len(urls))
|
|
}
|
|
require.ElementsMatch(t, urls, methodToURLs[method], "invalid urls for method %s", method)
|
|
}
|
|
}
|
|
|
|
func TestOpenAPIRequestBodies(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
content string
|
|
bodies []string
|
|
}{
|
|
{name: "xml without schema", content: "application/xml: {}", bodies: []string{`<?xml version="1.0"?><root/>`}},
|
|
{name: "xml string schema", content: "application/xml: {schema: {type: string}}", bodies: []string{"string"}},
|
|
{name: "xml array schema", content: "application/xml: {schema: {type: array, items: {type: string}}}", bodies: nil},
|
|
{name: "json without schema", content: "application/json: {}", bodies: []string{"{}"}},
|
|
{name: "text without schema", content: "text/plain: {}", bodies: []string{"string"}},
|
|
{name: "octet-stream without schema", content: "application/octet-stream: {}", bodies: []string{"string1\nstring2"}},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
spec := `openapi: 3.0.0
|
|
info: {title: t, version: "1"}
|
|
servers: [{url: "http://example.com"}]
|
|
paths:
|
|
/items:
|
|
post:
|
|
requestBody:
|
|
content:
|
|
` + tt.content + `
|
|
responses:
|
|
"200": {description: ok}
|
|
`
|
|
var bodies []string
|
|
err := New().Parse(strings.NewReader(spec), func(rr *types.RequestResponse) bool {
|
|
bodies = append(bodies, rr.Request.Body)
|
|
return false
|
|
}, "spec.yaml")
|
|
require.NoError(t, err)
|
|
require.Equal(t, tt.bodies, bodies)
|
|
})
|
|
}
|
|
}
|