-
Notifications
You must be signed in to change notification settings - Fork 26
Open
Description
Backend accepts requests with invalid data that should be rejected with 400-level errors.
Examples:
- https://github.com/WildMeOrg/wildbook-ia/blob/api/api_docs/schemathesis/logs/api_claude.txt#L4799:
PUT /api/annot/tags/json/- Accepts request withx-schemathesis-unknown-property: 42whenadditionalProperties: false. Returns 200 OK instead of 400. - https://github.com/WildMeOrg/wildbook-ia/blob/api/api_docs/schemathesis/logs/api_claude.txt#L5062:
GET /api/image/feature/json/{uuid}/- Accepts path parameteruuid=0which doesn't match UUID format. Returns 200 OK with nested error message instead of 400.
This issue was detected by running schemathesis on a Claude-generated API.
- Claude-generated API: https://github.com/WildMeOrg/wildbook-ia/blob/api/api_docs/openapi/api_claude.yaml
schemathesistest logs: https://github.com/WildMeOrg/wildbook-ia/blob/api/api_docs/schemathesis/logs/api_claude.txt- Claude-generated summary of issues: https://github.com/WildMeOrg/wildbook-ia/blob/api/api_docs/schemathesis/summaries/api_claude.md
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels