小贝子编程

Json模式验证在WSO2 APIM中失败



我正在使用wso2 apim 3.1.0，我想为json有效负载启用json模式验证。我已经参考了在wso2apim中设置json模式验证的帮助文档https://m saranki.medium.com/unboxing - json模式验证器- 320 - 2 - dd944dae6c0。我正在测试以下API的json模式验证

openapi: "3.0.1"
info: 
title: "SampleAPI"
version: "1.2.3"
servers: 
- 
url: "/"
security: 
- 
default: []
paths: 
/*: 
get: 
responses: 
200: 
description: "OK"
security: 
- 
default: []
x-auth-type: "Application & Application User"
x-throttling-tier: "Unlimited"
x-wso2-application-security: 
security-types: 
- "oauth2"
- "basic_auth"
optional: false
put: 
responses: 
200: 
description: "OK"
security: 
- 
default: []
x-auth-type: "Application & Application User"
x-throttling-tier: "Unlimited"
x-wso2-application-security: 
security-types: 
- "oauth2"
- "basic_auth"
optional: false
post: 
requestBody: 
content: 
application/json: 
schema: 
$ref: "#/components/schemas/User"
required: false
responses: 
200: 
description: "OK"
security: 
- 
default: []
x-auth-type: "Application & Application User"
x-throttling-tier: "Unlimited"
x-wso2-application-security: 
security-types: 
- "oauth2"
- "basic_auth"
optional: false
delete: 
responses: 
200: 
description: "OK"
security: 
- 
default: []
x-auth-type: "Application & Application User"
x-throttling-tier: "Unlimited"
x-wso2-application-security: 
security-types: 
- "oauth2"
- "basic_auth"
optional: false
patch: 
responses: 
200: 
description: "OK"
security: 
- 
default: []
x-auth-type: "Application & Application User"
x-throttling-tier: "Unlimited"
x-wso2-application-security: 
security-types: 
- "oauth2"
- "basic_auth"
optional: false
components: 
schemas: 
User: 
required: 
- "id"
properties: 
id: 
type: "string"
format: "uuid"
name: 
type: "string"
email: 
type: "string"
format: "email"
dob: 
type: "string"
format: "date"
securitySchemes: 
default: 
type: "oauth2"
flows: 
implicit: 
authorizationUrl: "https://test.com"
scopes: {}
x-wso2-auth-header: "Authorization"
x-wso2-cors: 
corsConfigurationEnabled: false
accessControlAllowOrigins: 
- "*"
accessControlAllowCredentials: false
accessControlAllowHeaders: 
- "authorization"
- "Access-Control-Allow-Origin"
- "Content-Type"
- "SOAPAction"
- "apikey"
- "Credentials"
accessControlAllowMethods: 
- "GET"
- "PUT"
- "POST"
- "DELETE"
- "PATCH"
- "OPTIONS"
x-wso2-production-endpoints: 
urls: 
- "http://localhost:9090/Cipango-CallAS/v1/sp/1/accounts/123/call"
type: "http"
x-wso2-sandbox-endpoints: 
urls: 
- "http://localhost:9090/Cipango-CallAS/v1/sp/1/accounts/123/call"
type: "http"
x-wso2-basePath: "/sample/1.2.3"
x-wso2-transports: 
- "http"
- "https"
x-wso2-response-cache: 
enabled: false
cacheTimeoutInSeconds: 300`

但是当我用正确的json有效负载触发请求时，我看到下面的错误消息

TID: [-1] [] [2021-10-19 16:14:48,136]  WARN {org.apache.synapse.transport.passthru.SourceHandler} - I/O error: Received fatal alert: certificate_unknown
TID: [-1234] [] [2021-10-19 16:14:49,237] ERROR {org.apache.synapse.transport.passthru.ServerWorker} - Error processing POST request for : /sample/1.2.3. java.lang.IllegalArgumentException: JsonObject (through reference chain: com.google.gson.JsonArray["asBoolean"])
at com.fasterxml.jackson.databind.ObjectMapper._convert(ObjectMapper.java:3751)
at com.fasterxml.jackson.databind.ObjectMapper.convertValue(ObjectMapper.java:3669)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.extractReference_aroundBody26(SchemaValidator.java:547)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.extractReference(SchemaValidator.java:532)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.extractSchemaFromRequest_aroundBody18(SchemaValidator.java:327)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.extractSchemaFromRequest(SchemaValidator.java:297)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.getSchemaContent_aroundBody16(SchemaValidator.java:284)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.getSchemaContent(SchemaValidator.java:281)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.validateRequest_aroundBody8(SchemaValidator.java:211)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.validateRequest(SchemaValidator.java:209)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.handleRequest_aroundBody2(SchemaValidator.java:114)
at org.wso2.carbon.apimgt.gateway.handlers.security.SchemaValidator.handleRequest(SchemaValidator.java:75)
at org.apache.synapse.rest.API.process(API.java:367)
at org.apache.synapse.rest.RESTRequestHandler.apiProcessNonDefaultStrategy(RESTRequestHandler.java:149)
at org.apache.synapse.rest.RESTRequestHandler.dispatchToAPI(RESTRequestHandler.java:95)
at org.apache.synapse.rest.RESTRequestHandler.process(RESTRequestHandler.java:71)
at org.apache.synapse.core.axis2.Axis2SynapseEnvironment.injectMessage(Axis2SynapseEnvironment.java:327)
at org.apache.synapse.core.axis2.SynapseMessageReceiver.receive(SynapseMessageReceiver.java:98)
at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:180)
at org.apache.synapse.transport.passthru.ServerWorker.processNonEntityEnclosingRESTHandler(ServerWorker.java:368)
at org.apache.synapse.transport.passthru.ServerWorker.processEntityEnclosingRequest(ServerWorker.java:427)
at org.apache.synapse.transport.passthru.ServerWorker.run(ServerWorker.java:182)
at org.apache.axis2.transport.base.threads.NativeWorkerPool$1.run(NativeWorkerPool.java:172)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:748)
Caused by: com.fasterxml.jackson.databind.JsonMappingException: JsonObject (through reference chain: com.google.gson.JsonArray["asBoolean"])
at com.fasterxml.jackson.databind.JsonMappingException.wrapWithPath(JsonMappingException.java:394)
at com.fasterxml.jackson.databind.JsonMappingException.wrapWithPath(JsonMappingException.java:353)
at com.fasterxml.jackson.databind.ser.std.StdSerializer.wrapAndThrow(StdSerializer.java:316)
at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:727)
at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:155)
at com.fasterxml.jackson.databind.ser.DefaultSerializerProvider._serialize(DefaultSerializerProvider.java:480)
at com.fasterxml.jackson.databind.ser.DefaultSerializerProvider.serializeValue(DefaultSerializerProvider.java:319)
at com.fasterxml.jackson.databind.ObjectMapper._convert(ObjectMapper.java:3729)
... 25 more
Caused by: java.lang.UnsupportedOperationException: JsonObject
at com.google.gson.JsonElement.getAsBoolean(JsonElement.java:153)
at com.google.gson.JsonArray.getAsBoolean(JsonArray.java:370)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:688)
at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:719)
... 29 more

让我知道这里有什么问题。

  • 解释

我相信您正在使用wso2am-3.1.0香草包以及一个自定义序列文件，该文件可能使用"json-eval($.)">有一个中介表达式。请证实。这是wso2am-3.0.0和wso2am-3.1.0 vanilla包中的一个已知问题。

这是因为当我们在/repository/deployment/server/synapse-configs/default/sequences目录下的序列中使用json-eval($.)表达式时，当它被部署时，synapse正在设置GsonJsonProvider[1]表示Jayway JsonPath中的JSON [2].

自从GsonJsonProvider正在加载，即使我们删除了在属性中介中具有json-eval($.)表达式的特定序列文件，该问题仍然存在，直到我们重新启动服务器。

但是，如果我们在/repository/deployment/server/synapse-configs/default/sequences目录下的序列中根本不使用JSON -eval($.)表达式，当我们将JSON模式验证启用为jsonsmartjsonprovider时，我们将不会得到上述错误。[3]用于表示Jayway JsonPath中的JSON。

由于JSON对象表示在错误场景中变得不同，因此在这种情况下会抛出IllegalArgumentException。

解决方案

您可以采用以下建议的解决方案之一。

  1. 此问题已在最新的WUM/更新包中修复。如果您订阅了WSO2，那么您可以获得最新的更新。
  2. 您可以部署一个新的wso2am-3.1.0 vanilla包并调用API调用，而不需要json-eval($.)表达式序列。

[1] https://www.javadoc.io/doc/com.jayway.jsonpath/json-path/latest/com/jayway/jsonpath/spi/json/GsonJsonProvider.html

[2] https://github.com/wso2/wso2-synapse/blob/417ce10dec58579b758e12f41909f17c09d25a64/modules/core/src/main/java/org/apache/synapse/mediators/eip/EIPUtils.java L348

[3] https://www.javadoc.io/doc/com.jayway.jsonpath/json-path/latest/com/jayway/jsonpath/spi/json/JsonSmartJsonProvider.html

相关内容

最新更新


热门标签：

javascript python java c# php android html jquery c++ css ios sql mysql arrays asp.net json python-3.x ruby-on-rails .net sql-server django objective-c excel regex ruby linux ajax iphone xml vba spring asp.net-mvc database wordpress string postgresql wpf windows xcode bash git oracle list vb.net multithreading eclipse algorithm macos powershell visual-studio image forms numpy scala function api selenium