Skip to content

Add fuzzing tests for validation #374

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
ivanauth wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add fuzzing tests for validation #374

ivanauth wants to merge 1 commit into from

Conversation

@ivanauth
Copy link

@ivanauth ivanauth commented Nov 25, 2025

Summary

Add Go fuzz tests for ObjectID, Namespace, Relation, and CaveatName validation to help ensure the regex-based validation logic doesn't panic on arbitrary input.

Fixes #103

Changes

  • Add FuzzObjectID - tests extended object ID validation
  • Add FuzzNamespace - tests namespace/object type validation
  • Add FuzzRelation - tests relation name validation
  • Add FuzzCaveatName - tests caveat name validation

Testing

# Run seed corpus tests
go test -v ./proto/authzed/api/validation_test/... -run "Fuzz" -fuzz=none

# Run actual fuzzing (5 seconds)
go test ./proto/authzed/api/validation_test/... -fuzz=FuzzObjectID -fuzztime=5s

@ivanauth
Add fuzzing tests for validation
af0b7a5 
Add Go fuzz tests for ObjectID, Namespace, Relation, and CaveatName
validation. These tests help ensure the regex-based validation logic
doesn't panic on arbitrary input.

Signed-off-by: ivanauth <ivan@authzed.com>
@ivanauth ivanauth requested a review from a team as a code owner November 25, 2025 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

add fuzzing test for the new extended object ID

1 participant

@ivanauth