## Usage

1. Run the test with existing Istio deployment:

    ```bash
    go test ./tests/integration/security/fuzz/... -p 1 -v -tags="integfuzz integ" -test.run "TestFuzzAuthorization|TestRequestAuthentication" \
      --istio.test.nocleanup --istio.test.env kube  --istio.test.kube.deploy=false - -timeout 30m \
      --istio.test.pullpolicy=IfNotPresent --istio.test.kube.loadbalancer=false --log_output_level=tf:debug
    ```

	"istio.io/istio/pkg/test/framework/components/istio/ingress"
	"istio.io/istio/pkg/test/framework/label"
	"istio.io/istio/tests/common/jwt"
)

// TestRequestAuthentication tests beta authn policy for jwt.
func TestRequestAuthentication(t *testing.T) {
	payload1 := strings.Split(jwt.TokenIssuer1, ".")[1]
	payload2 := strings.Split(jwt.TokenIssuer2, ".")[1]

		t.Errorf("found %d potential policy bypass requests:\n- %s", len(errCases), strings.Join(errCases, "\n- "))
	} else {
		t.Logf("no potential policy bypass requests found")
	}
}

func TestRequestAuthentication(t *testing.T) {
	framework.NewTest(t).
		Run(func(t framework.TestContext) {
			ns := "fuzz-jwt"
			namespace.ClaimOrFail(t, t, ns)

			t.ConfigIstio().YAML(ns, requestAuthnPolicy).ApplyOrFail(t)

security,TestReachability/global-plaintext/naked->ws://headless:http
security,TestReachability/global-plaintext/naked->ws://multiversion:http
security,TestReachability/global-plaintext/naked->ws://naked:http
security,TestRequestAuthentication
security_cert_provision_prometheus,TestPrometheusCert
security_chiron,TestDNSCertificate
security_chiron,TestDNSCertificate/generateDNSCertificates
security_chiron,TestDNSCertificate/regenerateDNSCertificates