Topcoder Backend Services - Bug Hunt

Challenge Objectives

• Identify and log defects on the backend services related to the Challenge V5 engine.

About the Application 

Recently, we revamped our backend services related to challenge management to use newer technologies and follow our V5 API standards.

 

We have also created a set of processors that are responsible to manage different operations as well as backfilling data into our legacy systems.

What to Test (Scope)

• Repo: Since the Challenge engine consists of multiple smaller applications, the list of available repos can be found in the next section.

• Application type: REST API, Apache Kafka Processors

• Tech stack: NodeJs, Docker, DynamoDB, ElasticSearch

• Accepted types of bugs: We only target functional and security (eg data being exposed without appropriate authentication) issues for this bug hunt.

Targeted apps to test

• https://github.com/topcoder-platform/challenge-api

• https://github.com/topcoder-platform/resources-api

• https://github.com/topcoder-platform/legacy-challenge-processor

• https://github.com/topcoder-platform/challenge-processor-es

• https://github.com/topcoder-platform/legacy-challenge-migration-script

• https://github.com/topcoder-platform/legacy-challenge-processor

• https://github.com/topcoder-platform/legacy-challenge-resource-processor

• https://github.com/topcoder-platform/resource-processor

• https://github.com/topcoder-platform/resource-processor-es

 

For all above repos, use the develop branch.

Follow the README.md file of each repo for instructions on how to run each app locally.

You can pick any and as many of the above repos to test. Each issue must be submitted on the repo of the related application. For example, do not submit an issue related to the Challenge API in the Resources API repo otherwise it’ll get rejected.

 

Use Docker for running the AWS services locally.

 

Some apps may require M2M (Machine to Machine) configurations, you will find those attached on the challenge forum.

 

Should you have any doubt, feel free to ask on the challenge forum!

For each report of a bug, we need the following information:

• Steps to reproduce, including any needed information (Must list all the steps that need to reproduce the bug, DON'T list only the URL without test data)

• Current results before the bug is fixed

• Expected results, after the bug, is fixed

• Attach screenshots, videos (You can attach videos directly on Github, if not use services like www.screencast.com or https://monosnap.com Don’t use www.youtube.com to host the videos) & Crash - Console/Crash Logs and sample payloads (request body / query) that will be helpful to understand the bug.

• Attach the high-level labels. If you are selecting multiple labels (Platform/Device); If not the Bug will be REJECTED.

IMPORTANT NOTE:

Missing or Incorrect details to ANY of the above fields will mark the bug report as INCOMPLETE. 

For example, Incorrect Steps, Missing Screenshot/Screencast, Incorrect Actual and Expected results etc.

 

Issue Weights and Scoring

• Scoring will be based on the number of bugs by weight.  Be sure to correctly attach a weight to your bug.  The copilot has the right to change a severity at his discretion.

• Only verified issues will be counted.  Tickets created for enhancements or that are not bugs will not be counted. Duplicate issues will be closed and not counted. Log issues according to the guidelines above issues that do not follow these guidelines may reject due to lack of information.

• For challenge scoring, the user with the most verified issues will be selected as the winner. If two users submit the same issue, the user that submitted the issue first will receive credit.

• Please focus on functionality/UI testing based on the requirements, all bug reports based on your own assumptions will be rejected.

 

In addition to the first place prize, we will be awarding the following prize money to other competitors.

 

• Blocker/ Critical: $10 [10 Points]

• Major: $8 [8 Points]

• Minor: $5 [5 Points]

• Enhancement: $2 [2 Points]

 

P1 - Blocker: This bug causes the app to fail. No workaround exists. E.g. app crashes, app freezes.

P2 - Critical: This bug causes the app to fail for some specific cases. No workaround exists.

P3 - Major: This bug causes the app to fail, but there’s a workaround to prevent that issue.

P4 - Minor: This is an annoyance, but won’t prevent the app from running normally.

P5 - Enhancement:  Something noticed by testers that should be fixed, but isn’t considered a bug.

 

The additional prizes will be up to $250 for 2nd position, $200 for 3rd position and $150 for 4th position. No prizes will be awarded beyond the 4th position for any bugs.

Important Notice

• Follow the standard topcoder Bug Hunt Rules.

• If you do not properly document your bug reports, they will likely be rejected due to lack of information or documentation.

• DON'T RE-OPEN the issues in the review phase and anyone who RE-OPENS a ticket will be disqualified from the challenge.

• You must not edit the bug report once created, so make sure you enter all the details at the time you create the issue, otherwise, your issue will be moved to the end of the queue. If you really need to edit an issue you must use the comments section for this (i.e. add a comment to describe any changes you want to make to the issue), and we'll decide whether the changes are major enough to move the issue to the end of the queue. You are allowed to add screenshots in the comments section though, assuming your issue report contains all the details when created.

• You must specify the test data you have used in the 'Reproduction Steps', All the issues will be marked as 'Incomplete', if the correct test data is not provided.

• Keep an eye on the issues being submitted by other participants to minimize the time you may be spending on duplicate efforts. Knowing what has already been reported will allow you to better focus your time on finding yet undiscovered issues.

• There will be no appeals phase. The decision of Copilot for validity and severity of each filled issue will be final.

What to Submit

Submit all your bugs directly to GitHub. When you are done with your submissions please submit a .txt file using the “Submit” button before the submission phase ends. In this file include:

 

• Your Topcoder handle (The one displayed in the top right corner near the Profile picture)

• Your GitHub handle used to raise the issues.

 

- ALL THE SUBMISSIONS WITHOUT ABOVE INFORMATION WILL BE REJECTED AND WON’T BE PAID.

- IMPORTANT: Submit the above details before the Submission Phase ends.

- DON'T use any other link to create new issues OR submit as document, they won't count and won't be paid.