Assertion represents a Check request with expected result

This fuzzer targets authenticate methods of different Authenticator implementations.

This fuzzer creates the keycloakJson configuration settings and fuzz the protection and authorization methods in the AuthzClient

This is a base helper class that provides base methods for some fuzzing in the keycloak project.

This fuzzer targets the methods in different Certificate Utils Provider implementation classes in the crypto package.

CheckRecord captures details of a check operation

This fuzzer targets the methods in different client signature verifier provider.

This fuzzer targets the methods in different crypto related util classes in the common package.

This fuzzer targets the methods in different util classes in the common package.

ConsumeFuzzer reads structured typed values out of raw fuzz bytes.

Continue is passed to custom type-generation functions registered via Funcs.

============================================================================ TYPE DEFINITIONS ========================================================

This fuzzer targets different methods in DefaultAuthenticationFlows

EnhancedSecurityTests contains enhanced security test configurations

FuzzSeed represents seed values for the fuzzer

This fuzzer targets the parse method of JOSEParser. It calls the JOSEParser.parse method with random string to fuzz its parsing ability.

This fuzzer targets the encodeCek and decodeCek methods of different JweAlgorithm Provider implementation classes in the crypto package. The fuzzer r

This fuzzer targets the encodeJwe method of the JWE class. It creates and initialize a JWE object with random string or JWEHeader instance for further

This fuzzer targets the methods in JWKParser. It passes random string to the JWKParser object and call other methods that rely on the parsing result r

This fuzzer targets the JWKBuilder and JWKSUtils class. It generate a random set of JWK keys for creating a JSONWebKeySet object. It then call random

This fuzzer targets the static methods in the KeycloakModelUtils class.

This fuzzer targets the methods in the KeycloakUriBuilder class.

ModelTestCase encapsulates everything needed to test one authorization model

This fuzzer targets the methods in different pem utils provider.

This fuzzer targets the parse method of all StaxParser implementations. It creates a XMLEventReader with random bytes in UTF-8 encoding and pass it as

This fuzzer targets static methods in JAXBUtil class of the org.keycloak.saml.processing.core.util package. It passes random data to fuzz all those st

This fuzzer targets static methods in RedirectBindingSignatureUtil and JAXPValidationUtil classes of the org.keycloak.saml.processing.core.util packag

This fuzzer targets methods in XMLEncryptionUtil and XmlSignatureUtil classes of the org.keycloak.saml.processing.core.util package. It passes random

This fuzzer targets the methods in DefaultTokenManager class in the services jose jwe package.

This fuzzer targets the methods in different util classes in the services utils package.

This fuzzer targets the methods in TokenUtil class. It passes random string for choosing algorithm, key creation and method call.

TupleSpec represents a tuple to write to the store

UngrantedUserTest verifies unauthorized users are denied

WrongObjectTest verifies object-level isolation

WrongRelationTest verifies relation boundary enforcement

WrongUserTypeTest verifies type confusion prevention

fuzzConsumer extracts typed values from raw fuzz input bytes, similar to libFuzzer's FuzzedDataProvider. This allows fuzzers to accept a single []byte

fuzzOp represents a parsed operation to be executed

mockFeatureFlagClient is a mock implementation that returns true for all feature flags This enables all experimental features and unlocks code paths b

mockNetworkAnnotationsGenerator is a simple mock implementation

noopValidator is a stub for fuzzing that skips OpenAPI schema validation. This avoids the 111-second initialization of ComposeAPIDefinitions().

Write tuples based on tupleConfig bits