WIP: Added fuzz tests for Authentication and Graphql

chaoscenter/authentication/api/handlers/grpc/fuzz_tests/grpc_handler_fuzz_test.go

@@ -0,0 +1,122 @@
+package grpc_test
+
+import (
+	"context"
+	"testing"
+	fuzz "github.com/AdaLogics/go-fuzz-headers"
+	"github.com/litmuschaos/litmus/chaoscenter/authentication/api/handlers/grpc"
+	"github.com/litmuschaos/litmus/chaoscenter/authentication/api/mocks"
+	"github.com/litmuschaos/litmus/chaoscenter/authentication/api/presenter/protos"
+	"github.com/litmuschaos/litmus/chaoscenter/authentication/pkg/entities"
+	"github.com/stretchr/testify/mock"
+)
+
+func FuzzGetProjectById(f *testing.F) {
+	f.Fuzz(func(t *testing.T, data []byte) {
+		ctx := context.Background()
+		fuzzConsumer := fuzz.NewConsumer(data)
+		targetStruct := &struct {
+			name                   string
+			projectID              string
+			UserID 			   	   string
+			mockGetProjectResponse *entities.Project
+			mockGetProjectError    error
+			mockFindUsersResponse  *[]entities.User
+			mockFindUsersError     error
+			expectedResponse       *protos.GetProjectByIdResponse
+			expectedError          bool
+			JoinedAt			   int64
+			User				  entities.User
+
+		}{}
+		targetStruct.mockGetProjectResponse = &entities.Project{
+			ID:   targetStruct.projectID,
+				Name: targetStruct.name,
+				Members: []*entities.Member{
+					{
+						UserID:     targetStruct.UserID,
+						Invitation: entities.PendingInvitation,
+						JoinedAt:   targetStruct.JoinedAt,
+					},
+				},
+		}
+		targetStruct.mockFindUsersResponse = &[]entities.User{
+			{
+				ID:       targetStruct.User.ID,
+				Email:    targetStruct.User.Email,
+				Username: targetStruct.User.Username,
+			},
+		}
+		err := fuzzConsumer.GenerateStruct(targetStruct)
+		if err != nil {
+			return
+		}
+		s := &grpc.ServerGrpc{
+			ApplicationService: &mocks.MockedApplicationService{},
+		}			
+		mockService := s.ApplicationService.(*mocks.MockedApplicationService)
+		mockService.On("GetProjectByProjectID", targetStruct.projectID).Return(targetStruct.mockGetProjectResponse, targetStruct.mockGetProjectError)
+		if targetStruct.mockFindUsersResponse != nil {
+			mockService.On("FindUsersByUID", mock.Anything).Return(targetStruct.mockFindUsersResponse, targetStruct.mockFindUsersError)
+		}
+
+		req := &protos.GetProjectByIdRequest{
+			ProjectID: targetStruct.projectID,
+		}
+
+		_, err1 := s.GetProjectById(ctx, req)
+		if err1 != nil {
+			t.Errorf("ChaosExperimentHandler.GetExperiment() error = %v", err)
+			return
+		}
+
+
+	})
+}
+
+func FuzzGetUserById(f *testing.F) {
+	f.Fuzz(func(t *testing.T, data []byte) {
+		ctx := context.Background()
+		fuzzConsumer := fuzz.NewConsumer(data)
+		targetStruct := &struct {
+			name                   string
+			userID 			   	   string
+			username 				string
+			mockServiceResponse    *entities.User
+			mockServiceError   	 error
+			expectedResponse       *protos.GetProjectByIdResponse
+			expectedError          bool
+			DeactivatedAt		   *int64
+			User				  entities.User
+
+		}{}
+		targetStruct.mockServiceResponse = &entities.User{
+			ID:            targetStruct.User.ID,
+			Name:          targetStruct.User.Name,
+			Username:      targetStruct.User.Username,
+			DeactivatedAt: targetStruct.User.DeactivatedAt,
+			Role:          targetStruct.User.Role,
+			Email:         targetStruct.User.Email,
+		}
+		err := fuzzConsumer.GenerateStruct(targetStruct)
+		if err != nil {
+			return
+		}
+		s := &grpc.ServerGrpc{
+			ApplicationService: &mocks.MockedApplicationService{},
+		}			
+
+		mockService := s.ApplicationService.(*mocks.MockedApplicationService)
+		mockService.On("GetUser", targetStruct.userID).Return(targetStruct.mockServiceResponse, targetStruct.mockServiceError)
+
+		req := &protos.GetUserByIdRequest{
+			UserID: targetStruct.userID,
+		}
+
+		_, err1 := s.GetUserById(ctx, req)
+		if err1 != nil {
+			t.Errorf("ChaosExperimentHandler.GetExperiment() error = %v", err)
+			return
+		}
+	})	
+}

chaoscenter/authentication/go.mod

@@ -6,7 +6,7 @@ require (
 	github.com/coreos/go-oidc/v3 v3.1.0
 	github.com/gin-contrib/cors v1.3.1
 	github.com/gin-gonic/gin v1.9.1
-	github.com/golang-jwt/jwt v3.2.1+incompatible
+	github.com/golang-jwt/jwt v3.2.2+incompatible
 	github.com/golang/protobuf v1.5.4
 	github.com/google/uuid v1.6.0
 	github.com/kelseyhightower/envconfig v1.4.0
@@ -21,6 +21,23 @@ require (
 )
 
 require (
+	github.com/go-logr/logr v1.2.3 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/google/gofuzz v1.2.0 // indirect
+	github.com/litmuschaos/chaos-operator v0.0.0-20230718113617-6819a4be12e4 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	k8s.io/api v0.26.0 // indirect
+	k8s.io/apimachinery v0.26.0 // indirect
+	k8s.io/klog/v2 v2.80.1 // indirect
+	k8s.io/utils v0.0.0-20221107191617-1a15be271d1d // indirect
+	sigs.k8s.io/controller-runtime v0.11.1 // indirect
+	sigs.k8s.io/json v0.0.0-20220713155537-f223a00ba0e2 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
+)
+
+require (
+	github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24
 	github.com/KyleBanks/depth v1.2.1 // indirect
 	github.com/bytedance/sonic v1.9.1 // indirect
 	github.com/chenzhuoyu/base64x v0.0.0-20221115062448-fe3a3abad311 // indirect
@@ -38,9 +55,10 @@ require (
 	github.com/golang/snappy v0.0.1 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/klauspost/compress v1.13.6 // indirect
+	github.com/klauspost/compress v1.17.4 // indirect
 	github.com/klauspost/cpuid/v2 v2.2.4 // indirect
 	github.com/leodido/go-urn v1.2.4 // indirect
+	github.com/litmuschaos/litmus/chaoscenter/graphql/server v0.0.0-20240402034443-5da7e55e9d51
 	github.com/mailru/easyjson v0.7.7 // indirect
 	github.com/mattn/go-isatty v0.0.19 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect