14954769666

Committed 11 May 2025 10:14AM UTC coverage: 0.0% (-8.5%) from 8.457%

Build # 14954769666

Build Type

Pull #7135

github

Committed by

web-flow

Commit Message

Merge bf21e0bc7 into 4dd0cdfc4

Pull Request Pull Request #7135: fix(symfony,laravel): InvalidUriVariableException status code (e400)

Run Details

0 of 2 new or added lines in 2 files covered. (0.0%)

11040 existing lines in 370 files now uncovered.

0 of 48303 relevant lines covered (0.0%)

0.0 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0

/src/Symfony/Validator/State/ParameterValidatorProvider.php

<?php

/*
 * This file is part of the API Platform project.
 *
 * (c) Kévin Dunglas <dunglas@gmail.com>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

declare(strict_types=1);

namespace ApiPlatform\Symfony\Validator\State;

use ApiPlatform\Metadata\Operation;
use ApiPlatform\Metadata\Parameter;
use ApiPlatform\State\ParameterNotFound;
use ApiPlatform\State\ProviderInterface;
use ApiPlatform\State\Util\ParameterParserTrait;
use ApiPlatform\Validator\Exception\ValidationException;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Validator\ConstraintViolation;
use Symfony\Component\Validator\ConstraintViolationInterface;
use Symfony\Component\Validator\ConstraintViolationList;
use Symfony\Component\Validator\Validator\ValidatorInterface;

/**
 * Validates parameters using the Symfony validator.
 *
 * @experimental
 */
final class ParameterValidatorProvider implements ProviderInterface
{
    use ParameterParserTrait;

    public function __construct(
        private readonly ValidatorInterface $validator,
        private readonly ProviderInterface $decorated,
    ) {
    }

    public function provide(Operation $operation, array $uriVariables = [], array $context = []): object|array|null
    {
        if (!($request = $context['request'] ?? null) instanceof Request) {
            return $this->decorated->provide($operation, $uriVariables, $context);
        }

        $operation = $request->attributes->get('_api_operation') ?? $operation;
        if (!($operation->getQueryParameterValidationEnabled() ?? true)) {
            return $this->decorated->provide($operation, $uriVariables, $context);
        }

        $constraintViolationList = new ConstraintViolationList();
        foreach ($operation->getParameters() ?? [] as $parameter) {
            if (!$constraints = $parameter->getConstraints()) {
                continue;
            }

            $value = $parameter->getValue();
            if ($value instanceof ParameterNotFound) {
                $value = null;
            }

            $violations = [];
            if (\is_array($value) && $properties = $parameter->getExtraProperties()['_properties'] ?? []) {
                foreach ($properties as $property) {
                    $violations = [...$violations, ...$this->validator->validate($value[$property] ?? null, $constraints)];
                }
            } else {
                $violations = $this->validator->validate($value, $constraints);
            }

            foreach ($violations as $violation) {
                $constraintViolationList->add(new ConstraintViolation(
                    $violation->getMessage(),
                    $violation->getMessageTemplate(),
                    $violation->getParameters(),
                    $violation->getRoot(),
                    $this->getProperty($parameter, $violation),
                    $violation->getInvalidValue(),
                    $violation->getPlural(),
                    $violation->getCode(),
                    $violation->getConstraint(),
                    $violation->getCause()
                ));
            }
        }

        if (0 !== \count($constraintViolationList)) {
            throw new ValidationException($constraintViolationList);
        }

        return $this->decorated->provide($operation, $uriVariables, $context);
    }

    // There's a `property` inside Parameter but it's used for hydra:search only as here we want the parameter name instead
    private function getProperty(Parameter $parameter, ConstraintViolationInterface $violation): string
    {
        $key = $parameter->getKey();

        if (str_contains($key, '[:property]')) {
            return str_replace('[:property]', $violation->getPropertyPath(), $key);
        }

        if (str_contains($key, ':property')) {
            return str_replace(':property', $violation->getPropertyPath(), $key);
        }

        if ($p = $violation->getPropertyPath()) {
            return $p;
        }

        return $key;
    }
}

1	<?php
2
3	/*
4	* This file is part of the API Platform project.
5	*
6	* (c) Kévin Dunglas <dunglas@gmail.com>
7	*
8	* For the full copyright and license information, please view the LICENSE
9	* file that was distributed with this source code.
10	*/
11
12	declare(strict_types=1);
13
14	namespace ApiPlatform\Symfony\Validator\State;
15
16	use ApiPlatform\Metadata\Operation;
17	use ApiPlatform\Metadata\Parameter;
18	use ApiPlatform\State\ParameterNotFound;
19	use ApiPlatform\State\ProviderInterface;
20	use ApiPlatform\State\Util\ParameterParserTrait;
21	use ApiPlatform\Validator\Exception\ValidationException;
22	use Symfony\Component\HttpFoundation\Request;
23	use Symfony\Component\Validator\ConstraintViolation;
24	use Symfony\Component\Validator\ConstraintViolationInterface;
25	use Symfony\Component\Validator\ConstraintViolationList;
26	use Symfony\Component\Validator\Validator\ValidatorInterface;
27
28	/**
29	* Validates parameters using the Symfony validator.
30	*
31	* @experimental
32	*/
33	final class ParameterValidatorProvider implements ProviderInterface
34	{
35	use ParameterParserTrait;
36
37	public function __construct(
38	private readonly ValidatorInterface $validator,
39	private readonly ProviderInterface $decorated,
40	) {
UNCOV 41	}	×
42
43	public function provide(Operation $operation, array $uriVariables = [], array $context = []): object\|array\|null
44	{
UNCOV 45	if (!($request = $context['request'] ?? null) instanceof Request) {	×
46	return $this->decorated->provide($operation, $uriVariables, $context);	×
47	}
48
UNCOV 49	$operation = $request->attributes->get('_api_operation') ?? $operation;	×
UNCOV 50	if (!($operation->getQueryParameterValidationEnabled() ?? true)) {	×
UNCOV 51	return $this->decorated->provide($operation, $uriVariables, $context);	×
52	}
53
UNCOV 54	$constraintViolationList = new ConstraintViolationList();	×
UNCOV 55	foreach ($operation->getParameters() ?? [] as $parameter) {	×
UNCOV 56	if (!$constraints = $parameter->getConstraints()) {	×
UNCOV 57	continue;	×
58	}
59
UNCOV 60	$value = $parameter->getValue();	×
UNCOV 61	if ($value instanceof ParameterNotFound) {	×
UNCOV 62	$value = null;	×
63	}
64
UNCOV 65	$violations = [];	×
UNCOV 66	if (\is_array($value) && $properties = $parameter->getExtraProperties()['_properties'] ?? []) {	×
UNCOV 67	foreach ($properties as $property) {	×
UNCOV 68	$violations = [...$violations, ...$this->validator->validate($value[$property] ?? null, $constraints)];	×
69	}
70	} else {
UNCOV 71	$violations = $this->validator->validate($value, $constraints);	×
72	}
73
UNCOV 74	foreach ($violations as $violation) {	×
UNCOV 75	$constraintViolationList->add(new ConstraintViolation(	×
UNCOV 76	$violation->getMessage(),	×
UNCOV 77	$violation->getMessageTemplate(),	×
UNCOV 78	$violation->getParameters(),	×
UNCOV 79	$violation->getRoot(),	×
UNCOV 80	$this->getProperty($parameter, $violation),	×
UNCOV 81	$violation->getInvalidValue(),	×
UNCOV 82	$violation->getPlural(),	×
UNCOV 83	$violation->getCode(),	×
UNCOV 84	$violation->getConstraint(),	×
UNCOV 85	$violation->getCause()	×
UNCOV 86	));	×
87	}
88	}
89
UNCOV 90	if (0 !== \count($constraintViolationList)) {	×
UNCOV 91	throw new ValidationException($constraintViolationList);	×
92	}
93
UNCOV 94	return $this->decorated->provide($operation, $uriVariables, $context);	×
95	}
96
97	// There's a `property` inside Parameter but it's used for hydra:search only as here we want the parameter name instead
98	private function getProperty(Parameter $parameter, ConstraintViolationInterface $violation): string
99	{
UNCOV 100	$key = $parameter->getKey();	×
101
UNCOV 102	if (str_contains($key, '[:property]')) {	×
UNCOV 103	return str_replace('[:property]', $violation->getPropertyPath(), $key);	×
104	}
105
UNCOV 106	if (str_contains($key, ':property')) {	×
107	return str_replace(':property', $violation->getPropertyPath(), $key);	×
108	}
109
UNCOV 110	if ($p = $violation->getPropertyPath()) {	×
111	return $p;	×
112	}
113
UNCOV 114	return $key;	×
115	}
116	}

api-platform / core / 14954769666

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous