Composable RPC attack surface test suite.
Three test groups for JSON-RPC 2.0 endpoints: 1. Auth enforcement — per-method auth inside the dispatcher 2. Adversarial envelopes — malformed JSON-RPC requests 3. Adversarial params — schema-invalid params per method
Uses the same {build, roles} config as describe_adversarial_auth
and describe_adversarial_input. No DB needed — uses stub deps.
2 declarations
testing/rpc_attack_surface.ts view source
(options: RpcAttackSurfaceOptions): void Run the standard RPC attack surface test suite.
Generates 3 test groups: 1. Auth enforcement — per-method auth checks via JSON-RPC envelopes 2. Adversarial envelopes — malformed JSON-RPC requests 3. Adversarial params — schema-invalid params per method
Skips silently when surface.rpc_endpoints is empty.
optionsvoid testing/rpc_attack_surface.ts view source
RpcAttackSurfaceOptions Options for describe_rpc_attack_surface_tests.
buildBuild the app surface bundle (surface + route specs + middleware specs + rpc_endpoints).
() => AppSurfaceSpecrolesAll roles in the app (e.g. ['admin', 'keeper']).
Array<string>