Framework reporting #39
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…users - Add FRAMEWORK_OVERVIEW.md explaining capabilities and architecture - Add ARCHITECTURE.md detailing component design and interfaces These documents provide clear guidance for new contributors on project structure, implementation details, and future direction while helping users understand how to effectively utilize the framework.
Add Apache License 2.0 to formalize the project's open source status. This license allows users to freely use, modify, distribute, and contribute to the OWASP API Security Testing Framework while requiring attribution and providing basic liability protection.
Add comprehensive framework components: - ConfigLoader for flexible configuration from multiple sources - EndpointDiscoveryService for automatic API endpoint discovery - Enhanced HttpClient with advanced authentication and proxy support - Expanded ScanConfig with complete configuration options - Improved Scanner with optimized thread management These components provide the foundation for robust API security testing with support for various authentication methods, automatic endpoint detection, and flexible configuration options.
This commit introduces the following reporting classes: - Finding: Represents a security finding discovered during a scan. - ScanResult: Contains the complete results of a security scan. - Severity: Represents the severity level of a security finding.
|
|
||
| endpoints.add(new EndpointInfo(basePath + "/auth/login", "POST")); | ||
| endpoints.add(new EndpointInfo(basePath + "/auth/logout", "POST")); | ||
|
|
Collaborator
There was a problem hiding this comment.
Minor one - Later, we may need to keep these endpoints ( /users / auth etc...)in property files
cybersreejith
approved these changes
Mar 23, 2025
cybersreejith
approved these changes
Mar 23, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This commit introduces the following reporting classes: