Giters

blst-security / cherrybomb

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

Home Page:https://www.blstsecurity.com/cherrybomb

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

YAML support broken?

rngtng opened this issue · comments

commented

Describe the bug
According to #19 yaml support should be there, but I couldn't get it working:

An OAS 3.1 file in yaml format raises error:

> cherrybomb --file foo.yaml
 v1.0.0
Starting Cherrybomb...
Opening OAS file...
Parsing OAS file...
Error: Error parsing OAS file: expected value at line 1 column

Same content as json works fine.

To Reproduce
Steps to reproduce the behavior:

  1. wget https://raw.githubusercontent.com/OAI/OpenAPI-Specification/main/examples/v3.1/non-oauth-scopes.yaml
  2. cherrybomb --file non-oauth-scopes.yaml
  3. FAILURE!

But JSON works:

  1. wget https://raw.githubusercontent.com/OAI/OpenAPI-Specification/main/examples/v3.1/non-oauth-scopes.json
  2. cherrybomb --file non-oauth-scopes.json
  3. SUCCESS!

Expected behavior
YAML File gets successfully parsed

Version

  • Version 1.0.0
commented

Hey @rngtng,
Thank you for taking the time to contact us.
You are correct, We used to support the YAML OpenAPI file in previous versions.
However, for the time being, we only support JSON files in this new release.
Thank you to pay attention to us!
It's already on our list of things to do.
I will notify you once this feature is available.

commented

Cool, thanks the fast feedback. No worries, there are enough yaml -> json converters out there…

commented

This is fixed..?

commented

Thank @jayvdb Yes it is fixed, and we also updated the crates.
I close this issue