cncf / cncf-fuzzing

✨🔐 CNCF Fuzzers
https://cncf.io/projects
Apache License 2.0
111 stars 41 forks source link

keycloak: Authz client fuzzer #425

Closed arthurscchan closed 1 year ago

arthurscchan commented 1 year ago

This PR creates the fuzzer for AuthzClient class and target its different version of protection and authorization method which depends on a auth web server. Currently, same as #423, it is pointed to empty auth url to avoid HTTP connection. The next improvement step is to implement mock server service to simulate a response for fuzing those response handling logic. The settings of the auth url is set in a json configuration.