Add fuzzers to CI

.github/workflows/ci.yml

@@ -84,3 +84,25 @@ jobs:
 
             -   name: Run tests no features
                 run: wasm-pack test --node --no-default-features --features rust_crypto,getrandom/js
+
+    fuzz:
+        name: Run fuzzer
+        runs-on: ubuntu-latest
+        strategy:
+            matrix:
+                include:
+                - fuzz_target: decoding_key_ec
+                - fuzz_target: decoding_key_ed
+                - fuzz_target: decoding_key_rsa
+                - fuzz_target: encoding_key_ec
+                - fuzz_target: encoding_key_ed
+                - fuzz_target: encoding_key_rsa
+        steps:
+            -   uses: actions/checkout@v6
+            -   name: Install Rust
+                uses: dtolnay/rust-toolchain@master
+                with:
+                    toolchain: nightly
+            -   name: Install cargo-fuzz
+                run: cargo install cargo-fuzz
+            -   run: cargo fuzz run ${{ matrix.fuzz_target }} -- -max_total_time=300

fuzz/.gitignore

@@ -0,0 +1,4 @@
+target
+corpus
+artifacts
+coverage

fuzz/Cargo.toml

@@ -0,0 +1,56 @@
+[package]
+name = "jsonwebtoken-fuzz"
+version = "0.0.0"
+publish = false
+edition = "2024"
+
+[package.metadata]
+cargo-fuzz = true
+
+[dependencies]
+libfuzzer-sys = "0.4"
+
+[dependencies.jsonwebtoken]
+path = ".."
+
+[[bin]]
+name = "encoding_key_ec"
+path = "fuzz_targets/encoding_key_ec.rs"
+test = false
+doc = false
+bench = false
+
+[[bin]]
+name = "encoding_key_ed"
+path = "fuzz_targets/encoding_key_ed.rs"
+test = false
+doc = false
+bench = false
+
+[[bin]]
+name = "encoding_key_rsa"
+path = "fuzz_targets/encoding_key_rsa.rs"
+test = false
+doc = false
+bench = false
+
+[[bin]]
+name = "decoding_key_ec"
+path = "fuzz_targets/decoding_key_ec.rs"
+test = false
+doc = false
+bench = false
+
+[[bin]]
+name = "decoding_key_ed"
+path = "fuzz_targets/decoding_key_ed.rs"
+test = false
+doc = false
+bench = false
+
+[[bin]]
+name = "decoding_key_rsa"
+path = "fuzz_targets/decoding_key_rsa.rs"
+test = false
+doc = false
+bench = false

fuzz/fuzz_targets/decoding_key_ec.rs

@@ -0,0 +1,7 @@
+#![no_main]
+
+use libfuzzer_sys::fuzz_target;
+
+fuzz_target!(|data: &[u8]| {
+    let _ = jsonwebtoken::DecodingKey::from_ec_pem(data);
+});

fuzz/fuzz_targets/decoding_key_ed.rs

@@ -0,0 +1,7 @@
+#![no_main]
+
+use libfuzzer_sys::fuzz_target;
+
+fuzz_target!(|data: &[u8]| {
+    let _ = jsonwebtoken::DecodingKey::from_ed_pem(data);
+});

fuzz/fuzz_targets/decoding_key_rsa.rs

@@ -0,0 +1,7 @@
+#![no_main]
+
+use libfuzzer_sys::fuzz_target;
+
+fuzz_target!(|data: &[u8]| {
+    let _ = jsonwebtoken::DecodingKey::from_rsa_pem(data);
+});

fuzz/fuzz_targets/encoding_key_ec.rs

@@ -0,0 +1,7 @@
+#![no_main]
+
+use libfuzzer_sys::fuzz_target;
+
+fuzz_target!(|data: &[u8]| {
+    let _ = jsonwebtoken::EncodingKey::from_ec_pem(data);
+});

fuzz/fuzz_targets/encoding_key_ed.rs

@@ -0,0 +1,7 @@
+#![no_main]
+
+use libfuzzer_sys::fuzz_target;
+
+fuzz_target!(|data: &[u8]| {
+    let _ = jsonwebtoken::EncodingKey::from_ed_pem(data);
+});

fuzz/fuzz_targets/encoding_key_rsa.rs

@@ -0,0 +1,7 @@
+#![no_main]
+
+use libfuzzer_sys::fuzz_target;
+
+fuzz_target!(|data: &[u8]| {
+    let _ = jsonwebtoken::EncodingKey::from_rsa_pem(data);
+});