New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

test(security): add security tests for article and profile endpoints #20

Draft

derevnjuk wants to merge 3 commits into main from bright/tests-69088b25-8acf-42a6-af6f-51558e6bdba5

Member

derevnjuk commented Jan 18, 2025 •

edited

Loading

Description

Adds SecTester security tests for the following endpoints:

GET /articles
GET /articles/feed
GET /articles/{slug}
POST /articles
PUT /articles/{slug}
DELETE /articles/{slug}
POST /articles/{slug}/favorite
DELETE /articles/{slug}/favorite
GET /articles/example-article/comments
POST /articles/example-article/comments
DELETE /articles/example-article/comments/1
GET http://localhost:3000/api/profiles/johndoe
POST http://localhost:3000/api/profiles/johndoe/follow
DELETE http://localhost:3000/api/profiles/johndoe/follow
POST http://localhost:3000/sentiment/score
GET http://localhost:3000/tags
POST http://localhost:3000/api/users/login
POST http://localhost:3000/api/users
GET http://localhost:3000/api/user
PUT http://localhost:3000/api/user

Tests cover:

SQL injection
XSS vulnerabilities
Authentication bypass

Test Plan

Validate that all security tests pass without any issues
Ensure that endpoints are protected against common security threats

Endpoints Tested

GET /articles
GET /articles/feed
GET /articles/{slug}
POST /articles
PUT /articles/{slug}
DELETE /articles/{slug}
POST /articles/{slug}/favorite
DELETE /articles/{slug}/favorite
GET /articles/example-article/comments
POST /articles/example-article/comments
DELETE /articles/example-article/comments/1
GET http://localhost:3000/api/profiles/johndoe
POST http://localhost:3000/api/profiles/johndoe/follow
DELETE http://localhost:3000/api/profiles/johndoe/follow
POST http://localhost:3000/sentiment/score
GET http://localhost:3000/tags
POST http://localhost:3000/api/users/login
POST http://localhost:3000/api/users
GET http://localhost:3000/api/user
PUT http://localhost:3000/api/user


          chore: empty commit for PR

a00fcb3

derevnjuk changed the title ~~test(security): add security tests~~ test(security): add security tests for article and profile endpoints

derevnjuk added 2 commits

January 18, 2025 17:14


          test: add Bright's tests

a25b40c


          test: add Bright's workflow file

a2426cc

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet