Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@atomiq/json-schema-test-suite
Advanced tools
Exposes JSON Schema Test Suite as a Node.js package, so don't need to add as a git submodule.
This is a fork of JSON Schema Test Suite for Node.js validator development.
The JSON Schema Test Suite is meant to be a language agnostic test suite for testing JSON Schema validation libraries. This fork makes the test suite available as an npm package for use with Node.js.
npm install @atomiq/json-schema-test-suite
It is current with the latest commit to 7511038dcb4f4b430fa2a929184da70b670bdd35
(June 17, 2015) on the upstream
develop
branch. When pulling the source from GitHub, make sure to checkout the node
branch for taking advantage
of the node features in this fork. The master
and develop
branches track the
upstream repo.
There are a number of ways of loading the tests:
var testSuite = require('@atomiq/json-schema-test-suite');
// this will load all (required and optional) draft4 tests
var tests = testSuite.loadSync();
// optional `filter` is a function that takes 3 arguments (filename, parent, optional)
// and returns true if the test should be included. The optional argument is true
// for all files under the `<draft>/optional` directory.
// optional `draft` should be either `'draft3'` or `'draft4'`
var tests = testSuite.loadSync(filter, draft);
// convenience functions:
// The following take an optional `filter` as described previously (undefined will load all tests)
var draft3 = testSuite.draft3();
var draft4 = testSuite.draft4();
// The following take an optional `draft` argument (defaults to 'draft4')
var all = testSuite.loadAllSync();
var required = testSuite.loadRequiredSync();
var optional = testSuite.loadOptionalSync();
The return value of these functions is an array of objects that correspond to each file under tests/<draft>
that
passed the filter (the default is all, so the array will also include all the optional files).
Each object has the following structure (using tests/draft4/additionalItems.json
as an example):
{
group: 'additionalItems',
file: 'additionalItems.json',
optional: false, // true if a file under the optional directory
path: '/full/path/to/JSON-Schema-Test-Suite/tests/draft4/additionalItems.json',
schemas: []
}
The schemas
property contains the array of objects loaded from the test file.
Each object consists of a schema and description, along with a number of tests used for validation. Using the first schema object in the array from tests/draft4/additionalItems.json
as an example:
{
description: 'additionalItems as schema',
schema: {
items: [{}],
additionalItems: { type: "integer" }
},
tests: [
{
description: "additional items match schema",
data: [ null, 2, 3, 4 ],
valid: true
},
{
description: "additional items do not match schema",
data: [ null, 2, 3, "foo" ],
valid: false
}
]
}
You can apply a validator against all the tests. You need to create a validator factory function that takes a JSON schema and an options argument, and returns an object with a validate method. The validate function should take a JSON object to be validated against the schema. It should return an object with a valid property set to true or false, and if not valid, an errors property that is an array of one or more validation errors.
The following are examples of Tiny Validator (tv4)
and z-schema
validator factories used by the unit test.
var tv4 = require('tv4');
var tv4Factory = function (schema, options) {
return {
validate: function (json) {
try {
var valid = tv4.validate(json, schema);
return valid ? { valid: true } : { valid: false, errors: [ tv4.error ] };
} catch (err) {
return { valid: false, errors: [err.message] };
}
}
};
};
var ZSchema = require('z-schema');
var zschemaFactory = function (schema, options) {
var zschema = new ZSchema(options);
return {
validate: function (json) {
try {
var valid = zschema.validate(json, schema);
return valid ? { valid: true } : { valid: false, errors: zschema.getLastErrors() };
} catch (err) {
return { valid: false, errors: [err.message] };
}
}
};
};
Using a validator factory as described above, you can test it as follows.
var testSuite = require('@atomiq/json-schema-test-suite');
var factory = require('YOUR-FACTORY');
var options = { ... };
var tests = testSuite.testSync(factory, options);
The tests
return value is as described previously in the Usage section, with an additional property for each test object that corresponds to the test result:
{
description: 'additionalItems as schema',
schema: {
items: [{}],
additionalItems: { type: "integer" }
},
tests: [
{
description: "additional items match schema",
data: [ null, 2, 3, 4 ],
valid: true,
result: {
valid: false,
errors: [ ... ]
}
},
{
description: "additional items do not match schema",
data: [ null, 2, 3, "foo" ],
valid: false,
result: {
true
}
}
]
}
This repository contains a set of JSON objects that implementors of JSON Schema validation libraries can use to test their validators.
It is meant to be language agnostic and should require only a JSON parser.
The conversion of the JSON objects into tests within your test framework of choice is still the job of the validator implementor.
If you're going to use this suite, you need to know how tests are laid out. The
tests are contained in the tests
directory at the root of this repository.
Inside that directory is a subdirectory for each draft or version of the
schema. We'll use draft3
as an example.
If you look inside the draft directory, there are a number of .json
files,
which logically group a set of test cases together. Often the grouping is by
property under test, but not always, especially within optional test files
(discussed below).
Inside each .json
file is a single array containing objects. It's easiest to
illustrate the structure of these with an example:
{
"description": "the description of the test case",
"schema": {"the schema that should" : "be validated against"},
"tests": [
{
"description": "a specific test of a valid instance",
"data": "the instance",
"valid": true
},
{
"description": "another specific test this time, invalid",
"data": 15,
"valid": false
}
]
}
So a description, a schema, and some tests, where tests is an array containing one or more objects with descriptions, data, and a boolean indicating whether they should be valid or invalid.
Draft 3 and 4 should have full coverage. If you see anything missing or think there is a useful test missing, please send a pull request or open an issue.
This suite is being used by:
If you use it as well, please fork and send a pull request adding yourself to the list :).
If you see something missing or incorrect, a pull request is most welcome!
There are some sanity checks in place for testing the test suite. You can run
them with bin/jsonschema_suite check
. They will be run automatically by
Travis CI as well.
FAQs
Exposes JSON Schema Test Suite as a Node.js package
We found that @atomiq/json-schema-test-suite demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.