API Authorization

1. Basic credentials

{ "login": "admin", "password": "admin" }

2. Empty credentials

{ "login": "", "password": "" }

3. Null values

{ "login": null, "password": null }

4. Credentials as numbers

{ "login": 123, "password": 456 }

6. Credentials as booleans

{ "login": true, "password": false }

7. Credentials as arrays

{ "login": ["admin"], "password": ["password"] }

8. Credentials as objects

{ "login": { "username": "admin", "password": { "password": "password" } } }

9. Special characters in credentials

{ "login": "@dm!n", "password": "p@ssw0rd#" }

10. SQL Injection

{ "login": "admin' --", "password": "password" }

11. HTML tags in credentials

{ "login": "\n\n# admin\n\n", "password": "ololo-HTML-XSS" }

12. Unicode in credentials

{ "login": "\u0061\u0064\u006D\u0069\u006E", "password": "\u0070\u0061\u0073\u0073\u0077\u006F\u0072\u0064" }

13. Credentials with escape characters

{ "login": "ad\\nmin", "password": "pa\\ssword" }

14. Credentials with white space

{ "login": " ", "password": " " }

15. Overlong values

{ "login": "a"*10000, "password": "b"*10000 }

Note: The above notation is symbolic. In actual JSON, you would replace "a"*10000 with a string of 10,000 a characters.

16. Malformed JSON (missing brace)

{ "login": "admin", "password": "admin" 

Warning: This JSON is missing the closing brace.

17. Malformed JSON (extra comma)

{ "login": "admin", "password": "admin", }

18. Missing login key

{ "password": "admin" }

19. Missing password key

{ "login": "admin" }

20. Swapped key values

{ "admin": "login", "password": "password" }