Implement fuzztesting.

backend/pyproject.toml

@@ -49,6 +49,7 @@ slack-bolt = "^1.22.0"
 djlint = "^1.36.4"
 pre-commit = "^4.1.0"
 ruff = "^0.11.0"
+hypothesis = "^6.129.4"
 
 [tool.poetry.group.test.dependencies]
 pytest = "^8.3.4"

backend/tests/core/api/algolia_test.py

@@ -4,6 +4,7 @@
 import pytest
 import requests
 from django.core.cache import cache
+from hypothesis import given, strategies
 
 from apps.core.api.algolia import algolia_search
 
@@ -138,3 +139,29 @@ def test_algolia_search_invalid_request(
 
         assert response.status_code == requests.codes.bad_request
         assert response_data["error"] == error_message
+
+    @given(
+        index_name=strategies.text(),
+        query=strategies.text(),
+        page=strategies.integers(),
+        hits_per_page=strategies.integers(),
+        facet_filters=strategies.lists(strategies.text()),
+    )
+    def test_fuzz_algolia_search(self, index_name, query, page, hits_per_page, facet_filters):
+        """Test the algolia_search function with fuzz testing."""
+        mock_request = Mock()
+        mock_request.method = "POST"
+        mock_request.META = {"HTTP_X_FORWARDED_FOR": CLIENT_IP_ADDRESS}
+        mock_request.body = json.dumps(
+            {
+                "facetFilters": facet_filters,
+                "hitsPerPage": hits_per_page,
+                "indexName": index_name,
+                "page": page,
+                "query": query,
+            }
+        )
+
+        response = algolia_search(mock_request)
+
+        assert response.status_code in [requests.codes.ok, requests.codes.bad_request]

backend/tests/slack/events/fuzz_tests/user_joind_channel/contribute_test.py

@@ -0,0 +1,38 @@
+from unittest.mock import MagicMock, patch
+
+from django.conf import settings
+
+from apps.slack.constants import (
+    OWASP_CONTRIBUTE_CHANNEL_ID,
+)
+from apps.slack.events.member_joined_channel.contribute import contribute_handler
+
+from hypothesis import given, strategies as st
+
+class TestContributeEventHandler:
+    @given(
+        events_enabled=st.booleans(),
+        project_count=st.integers(),
+        issue_count=st.integers(),
+    )
+    @patch("apps.owasp.models.project.Project.active_projects_count")
+    @patch("apps.github.models.issue.Issue.open_issues_count")
+    def test_handler_responses(
+        self,
+        mock_open_issues_count,
+        mock_active_projects_count,
+        events_enabled,
+        project_count,
+        issue_count,
+    ):
+        settings.SLACK_EVENTS_ENABLED = events_enabled
+        mock_active_projects_count.return_value = project_count
+        mock_open_issues_count.return_value = issue_count
+        mock_slack_event = {"user": "U123456", "channel": OWASP_CONTRIBUTE_CHANNEL_ID}
+        mock_slack_client = MagicMock()
+        mock_slack_client.conversations_open.return_value = {"channel": {"id": "C123456"}}
+
+
+        contribute_handler(event=mock_slack_event, client=mock_slack_client, ack=MagicMock())
+
+        assert True

backend/tests/slack/events/fuzz_tests/user_joind_channel/gsoc_test.py

@@ -0,0 +1,41 @@
+from unittest.mock import MagicMock
+
+
+from django.conf import settings
+from hypothesis import given, strategies as st
+
+from apps.slack.constants import OWASP_GSOC_CHANNEL_ID
+from apps.slack.events.member_joined_channel.gsoc import gsoc_handler
+
+class TestGsocEventHandler:
+    @given(
+        channel_id=st.text(),
+    )
+    def test_check_gsoc_handler(self, channel_id):
+        gsoc_module = __import__(
+            "apps.slack.events.member_joined_channel.gsoc",
+            fromlist=["gsoc_handler"],
+        )
+        check_gsoc_handler = getattr(
+            gsoc_module,
+            "check_gsoc_handler",
+            lambda x: x.get("channel") == OWASP_GSOC_CHANNEL_ID,
+        )
+
+        check_gsoc_handler({"channel": channel_id})
+
+        assert True
+
+    @given(
+        events_enabled=st.booleans(),
+    )
+    def test_handler_responses(self, events_enabled):
+        settings.SLACK_EVENTS_ENABLED = events_enabled
+        mock_slack_event = {"user": "U123456", "channel": OWASP_GSOC_CHANNEL_ID}
+        mock_slack_client = MagicMock()
+        mock_slack_client.conversations_open.return_value = {"channel": {"id": "C123456"}}
+
+        gsoc_handler(event=mock_slack_event, client=mock_slack_client, ack=MagicMock())
+
+        assert True
+