AppThreat/atom

Incorrect METHOD being inferred for APIs in Django application

Opened this issue · 0 comments

Describe the bug

The openAPI spec generation for a Django app, assigns incorrect METHOD to some endpoints

How to reproduce

Generate the spec for any Django application eg. https://github.com/smahesh29/Django-WebApp

        "/users/login.html": {
            "get": {
                "responses": {}
            },
            "post": {
                "responses": {}
            },
            "x-atom-usages": {
                "call": {
                    "django_web_app/django_web_app/urls.py": [
                        25
                    ]
                }
            }
        },
        "/users/logout.html": {
            "get": {
                "responses": {}
            },
            "post": {
                "responses": {}
            },
            "x-atom-usages": {
                "call": {
                    "django_web_app/django_web_app/urls.py": [
                        28
                    ]
                }
            }
        }

The spec contains endpoints with both GET and POST which looks incorrect