matusf / openapi-fuzzer

Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!
GNU Affero General Public License v3.0
526 stars 22 forks source link

Feature request: Fetch spec from URL #20

Open soofstad opened 1 year ago

soofstad commented 1 year ago

Hi, awesome tool :+1:

Would it be possible to implement a feature where the OpenApi spec where fetched from URL?

For example; I'm using FastAPI for my API, which has an integrated spec generator that is served at /openapi.json. It's easy enough to curl this url, save to a file, and run the tool as usual. But just being able to do; openapi-fuzzer --spec http://localhost/openapi.json would be nice.