Integrity Failures in Chi

Integrity failures in Chi APIs occur when data manipulation bypasses authorization controls, allowing attackers to modify resources they shouldn't access. In Chi's distributed architecture, these vulnerabilities often manifest through race conditions and improper state validation across microservices.

The most common pattern involves missing authorization checks in Chi's middleware chain. Consider a financial API where users can transfer funds between accounts. Without proper integrity validation, an attacker can manipulate request parameters to transfer funds from any account ID, regardless of ownership: