Yelp / fuzz-lightyear

A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos engineering testing and stateful, Swagger fuzzing.
Other
205 stars 25 forks source link

Invalid Swagger Format #54

Open naveenn2n opened 4 years ago

naveenn2n commented 4 years ago

Hi Team,

We are getting invalid swagger format while loading the json file. error: Invalid swagger format.

As per our observation, we are using petsore swagger version.

domanchi commented 4 years ago

Hi @naveenn2n,

Please provide more information so that we can reproduce the issue. It does not throw this error for me on master.

naveenn2n commented 4 years ago

Hi @domanchi ,

{"swagger":"2.0","info":{"version":"v1", this is the swagger information we provided. Due to privacy issues. I am unable to show content of json.

Please find below screenshots for more information. Error Screenshot https://user-images.githubusercontent.com/6263232/80711278-bc682900-8b0d-11ea-98a9-760b4364a11a.png

and Json format Screenshot https://user-images.githubusercontent.com/6263232/80711456-018c5b00-8b0e-11ea-8fe3-e32f5c170838.PNG

toptotu commented 3 years ago

Hi @naveenn2n,

Please provide more information so that we can reproduce the issue. It does not throw this error for me on master.

I also encountered the same problem. The YAML file path is https://www.3gpp.org/ftp/Specs/archive/29_series/29.510/OpenAPI/2018-12/TS29510_Nnrf_NFManagement.yaml

AlexB1986 commented 3 years ago

Hi @naveenn2n, Please provide more information so that we can reproduce the issue. It does not throw this error for me on master.

I also encountered the same problem. The YAML file path is https://www.3gpp.org/ftp/Specs/archive/29_series/29.510/OpenAPI/2018-12/TS29510_Nnrf_NFManagement.yaml

Hi @toptotu, your specification is in OpenAPI v3 format, but fuzz-lightyear use Bravado library that does not support OpenAPI v 3 -- please see https://github.com/Yelp/bravado/issues/306

AlexB1986 commented 3 years ago

Hi @naveenn2n , do you use integer keys (like 200) or string (like '200') in response codes? We faced that under Windows env with integer keys in response codes fuzz-lightyear produces "Invalid Swagger Format". You may try:

Hope, it will help.