298 lines
11 KiB
PHP
298 lines
11 KiB
PHP
|
<?php
|
||
|
|
namespace GuzzleHttp\Command\Guzzle;
|
||
|
|
|
||
|
|
use GuzzleHttp\Command\ToArrayInterface;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Default parameter validator
|
||
|
|
*/
|
||
|
|
class SchemaValidator
|
||
|
|
{
|
||
|
|
/**
|
||
|
|
* Whether or not integers are converted to strings when an integer is
|
||
|
|
* received for a string input
|
||
|
|
*
|
||
|
|
* @var bool
|
||
|
|
*/
|
||
|
|
protected $castIntegerToStringType;
|
||
|
|
|
||
|
|
/** @var array Errors encountered while validating */
|
||
|
|
protected $errors;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* @param bool $castIntegerToStringType Set to true to convert integers
|
||
|
|
* into strings when a required type is a string and the input value is
|
||
|
|
* an integer. Defaults to true.
|
||
|
|
*/
|
||
|
|
public function __construct($castIntegerToStringType = true)
|
||
|
|
{
|
||
|
|
$this->castIntegerToStringType = $castIntegerToStringType;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* @param Parameter $param
|
||
|
|
* @param $value
|
||
|
|
* @return bool
|
||
|
|
*/
|
||
|
|
public function validate(Parameter $param, &$value)
|
||
|
|
{
|
||
|
|
$this->errors = [];
|
||
|
|
$this->recursiveProcess($param, $value);
|
||
|
|
|
||
|
|
if (empty($this->errors)) {
|
||
|
|
return true;
|
||
|
|
} else {
|
||
|
|
sort($this->errors);
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Get the errors encountered while validating
|
||
|
|
*
|
||
|
|
* @return array
|
||
|
|
*/
|
||
|
|
public function getErrors()
|
||
|
|
{
|
||
|
|
return $this->errors ?: [];
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* From the allowable types, determine the type that the variable matches
|
||
|
|
*
|
||
|
|
* @param string|array $type Parameter type
|
||
|
|
* @param mixed $value Value to determine the type
|
||
|
|
*
|
||
|
|
* @return string|false Returns the matching type on
|
||
|
|
*/
|
||
|
|
protected function determineType($type, $value)
|
||
|
|
{
|
||
|
|
foreach ((array) $type as $t) {
|
||
|
|
if ($t == 'string'
|
||
|
|
&& (is_string($value) || (is_object($value) && method_exists($value, '__toString')))
|
||
|
|
) {
|
||
|
|
return 'string';
|
||
|
|
} elseif ($t == 'object' && (is_array($value) || is_object($value))) {
|
||
|
|
return 'object';
|
||
|
|
} elseif ($t == 'array' && is_array($value)) {
|
||
|
|
return 'array';
|
||
|
|
} elseif ($t == 'integer' && is_integer($value)) {
|
||
|
|
return 'integer';
|
||
|
|
} elseif ($t == 'boolean' && is_bool($value)) {
|
||
|
|
return 'boolean';
|
||
|
|
} elseif ($t == 'number' && is_numeric($value)) {
|
||
|
|
return 'number';
|
||
|
|
} elseif ($t == 'numeric' && is_numeric($value)) {
|
||
|
|
return 'numeric';
|
||
|
|
} elseif ($t == 'null' && !$value) {
|
||
|
|
return 'null';
|
||
|
|
} elseif ($t == 'any') {
|
||
|
|
return 'any';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Recursively validate a parameter
|
||
|
|
*
|
||
|
|
* @param Parameter $param API parameter being validated
|
||
|
|
* @param mixed $value Value to validate and validate. The value may
|
||
|
|
* change during this validate.
|
||
|
|
* @param string $path Current validation path (used for error reporting)
|
||
|
|
* @param int $depth Current depth in the validation validate
|
||
|
|
*
|
||
|
|
* @return bool Returns true if valid, or false if invalid
|
||
|
|
*/
|
||
|
|
protected function recursiveProcess(
|
||
|
|
Parameter $param,
|
||
|
|
&$value,
|
||
|
|
$path = '',
|
||
|
|
$depth = 0
|
||
|
|
) {
|
||
|
|
// Update the value by adding default or static values
|
||
|
|
$value = $param->getValue($value);
|
||
|
|
|
||
|
|
$required = $param->isRequired();
|
||
|
|
// if the value is null and the parameter is not required or is static,
|
||
|
|
// then skip any further recursion
|
||
|
|
if ((null === $value && !$required) || $param->isStatic()) {
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
$type = $param->getType();
|
||
|
|
// Attempt to limit the number of times is_array is called by tracking
|
||
|
|
// if the value is an array
|
||
|
|
$valueIsArray = is_array($value);
|
||
|
|
// If a name is set then update the path so that validation messages
|
||
|
|
// are more helpful
|
||
|
|
if ($name = $param->getName()) {
|
||
|
|
$path .= "[{$name}]";
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($type == 'object') {
|
||
|
|
// Determine whether or not this "value" has properties and should
|
||
|
|
// be traversed
|
||
|
|
$traverse = $temporaryValue = false;
|
||
|
|
|
||
|
|
// Convert the value to an array
|
||
|
|
if (!$valueIsArray && $value instanceof ToArrayInterface) {
|
||
|
|
$value = $value->toArray();
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($valueIsArray) {
|
||
|
|
// Ensure that the array is associative and not numerically
|
||
|
|
// indexed
|
||
|
|
if (isset($value[0])) {
|
||
|
|
$this->errors[] = "{$path} must be an array of properties. Got a numerically indexed array.";
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
$traverse = true;
|
||
|
|
} elseif ($value === null) {
|
||
|
|
// Attempt to let the contents be built up by default values if
|
||
|
|
// possible
|
||
|
|
$value = [];
|
||
|
|
$temporaryValue = $valueIsArray = $traverse = true;
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($traverse) {
|
||
|
|
if ($properties = $param->getProperties()) {
|
||
|
|
// if properties were found, validate each property
|
||
|
|
foreach ($properties as $property) {
|
||
|
|
$name = $property->getName();
|
||
|
|
if (isset($value[$name])) {
|
||
|
|
$this->recursiveProcess($property, $value[$name], $path, $depth + 1);
|
||
|
|
} else {
|
||
|
|
$current = null;
|
||
|
|
$this->recursiveProcess($property, $current, $path, $depth + 1);
|
||
|
|
// Only set the value if it was populated
|
||
|
|
if (null !== $current) {
|
||
|
|
$value[$name] = $current;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
$additional = $param->getAdditionalProperties();
|
||
|
|
if ($additional !== true) {
|
||
|
|
// If additional properties were found, then validate each
|
||
|
|
// against the additionalProperties attr.
|
||
|
|
$keys = array_keys($value);
|
||
|
|
// Determine the keys that were specified that were not
|
||
|
|
// listed in the properties of the schema
|
||
|
|
$diff = array_diff($keys, array_keys($properties));
|
||
|
|
if (!empty($diff)) {
|
||
|
|
// Determine which keys are not in the properties
|
||
|
|
if ($additional instanceof Parameter) {
|
||
|
|
foreach ($diff as $key) {
|
||
|
|
$this->recursiveProcess($additional, $value[$key], "{$path}[{$key}]", $depth);
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
// if additionalProperties is set to false and there
|
||
|
|
// are additionalProperties in the values, then fail
|
||
|
|
foreach ($diff as $prop) {
|
||
|
|
$this->errors[] = sprintf('%s[%s] is not an allowed property', $path, $prop);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// A temporary value will be used to traverse elements that
|
||
|
|
// have no corresponding input value. This allows nested
|
||
|
|
// required parameters with default values to bubble up into the
|
||
|
|
// input. Here we check if we used a temp value and nothing
|
||
|
|
// bubbled up, then we need to remote the value.
|
||
|
|
if ($temporaryValue && empty($value)) {
|
||
|
|
$value = null;
|
||
|
|
$valueIsArray = false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
} elseif ($type == 'array' && $valueIsArray && $param->getItems()) {
|
||
|
|
foreach ($value as $i => &$item) {
|
||
|
|
// Validate each item in an array against the items attribute of the schema
|
||
|
|
$this->recursiveProcess($param->getItems(), $item, $path . "[{$i}]", $depth + 1);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// If the value is required and the type is not null, then there is an
|
||
|
|
// error if the value is not set
|
||
|
|
if ($required && $value === null && $type != 'null') {
|
||
|
|
$message = "{$path} is " . ($param->getType()
|
||
|
|
? ('a required ' . implode(' or ', (array) $param->getType()))
|
||
|
|
: 'required');
|
||
|
|
if ($param->has('description')) {
|
||
|
|
$message .= ': ' . $param->getDescription();
|
||
|
|
}
|
||
|
|
$this->errors[] = $message;
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
// Validate that the type is correct. If the type is string but an
|
||
|
|
// integer was passed, the class can be instructed to cast the integer
|
||
|
|
// to a string to pass validation. This is the default behavior.
|
||
|
|
if ($type && (!$type = $this->determineType($type, $value))) {
|
||
|
|
if ($this->castIntegerToStringType
|
||
|
|
&& $param->getType() == 'string'
|
||
|
|
&& is_integer($value)
|
||
|
|
) {
|
||
|
|
$value = (string) $value;
|
||
|
|
} else {
|
||
|
|
$this->errors[] = "{$path} must be of type " . implode(' or ', (array) $param->getType());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// Perform type specific validation for strings, arrays, and integers
|
||
|
|
if ($type == 'string') {
|
||
|
|
// Strings can have enums which are a list of predefined values
|
||
|
|
if (($enum = $param->getEnum()) && !in_array($value, $enum)) {
|
||
|
|
$this->errors[] = "{$path} must be one of " . implode(' or ', array_map(function ($s) {
|
||
|
|
return '"' . addslashes($s) . '"';
|
||
|
|
}, $enum));
|
||
|
|
}
|
||
|
|
// Strings can have a regex pattern that the value must match
|
||
|
|
if (($pattern = $param->getPattern()) && !preg_match($pattern, $value)) {
|
||
|
|
$this->errors[] = "{$path} must match the following regular expression: {$pattern}";
|
||
|
|
}
|
||
|
|
|
||
|
|
$strLen = null;
|
||
|
|
if ($min = $param->getMinLength()) {
|
||
|
|
$strLen = strlen($value);
|
||
|
|
if ($strLen < $min) {
|
||
|
|
$this->errors[] = "{$path} length must be greater than or equal to {$min}";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if ($max = $param->getMaxLength()) {
|
||
|
|
if (($strLen ?: strlen($value)) > $max) {
|
||
|
|
$this->errors[] = "{$path} length must be less than or equal to {$max}";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
} elseif ($type == 'array') {
|
||
|
|
$size = null;
|
||
|
|
if ($min = $param->getMinItems()) {
|
||
|
|
$size = count($value);
|
||
|
|
if ($size < $min) {
|
||
|
|
$this->errors[] = "{$path} must contain {$min} or more elements";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if ($max = $param->getMaxItems()) {
|
||
|
|
if (($size ?: count($value)) > $max) {
|
||
|
|
$this->errors[] = "{$path} must contain {$max} or fewer elements";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
} elseif ($type == 'integer' || $type == 'number' || $type == 'numeric') {
|
||
|
|
if (($min = $param->getMinimum()) && $value < $min) {
|
||
|
|
$this->errors[] = "{$path} must be greater than or equal to {$min}";
|
||
|
|
}
|
||
|
|
if (($max = $param->getMaximum()) && $value > $max) {
|
||
|
|
$this->errors[] = "{$path} must be less than or equal to {$max}";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
return empty($this->errors);
|
||
|
|
}
|
||
|
|
}
|