The JsonSchemaValidatorBundle is a Symfony bundle that validate request payload and response with Json Schema for PSR7 & PSR17.
Install the bundle:
$ composer require nayzo/json-schema-validator-bundle
# config/packages/nayzo_json_schema_validator.yaml
nayzo_json_schema_validator:
resources:
my_account:
contract_file_path: '%kernel.project_dir%/resources/api_contract/myaccount1.yaml'
enable_default_request_validation_subscriber: true # default to false
enable_default_response_validation_subscriber: true # default to false
my_second_account:
contract_file_path: '%kernel.project_dir%/resources/api_contract/myaccount2.yaml'
enable_default_validation_exception_subscriber: true # default to false. (if activated, the default validation exception subscriber will be triggered and executed).
validation_exception_status_code: 400 # default to 422 Note that if no validation support is found (exp: MyAccountValidationSupport), no request/response validation subscriber will be triggered or executed.
<?php
use Nayzo\JsonSchemaValidatorBundle\Configurator\ValidationSubscriberSupportInterface;
final class MyAccountValidationSupport implements ValidationSubscriberSupportInterface
{
public function __construct(private RequestStack $requestStack)
{
}
public function support(): bool
{
// some code logic here... example:
return '/v1/my-account' === $this->requestStack->getMainRequest()->getPathInfo();
}
public static function getResourceName(): string
{
return 'my_account'; // this value represents the resource name.
}
}The JsonSchemaValidatorBundle defines two default validation subscribers: one for requests and another for responses.
These subscribers are responsible for validating request and response schemas.
To activate them, you must enable the corresponding flags: enable_default_request_validation_subscriber and enable_default_response_validation_subscriber, by setting their values to true.
If you prefer to use your own custom validation subscriber instead of the default ones provided by the bundle, you must disable the default subscribers by setting the enable_default_request_validation_subscriber flag to false, and then define the custom validation subscriber you wish to use.
Below is an example of usage without the default request/response validation subscribers.
<?php
// EventSubscriber
use Nayzo\JsonSchemaValidatorBundle\Validator\ValidatorFactory;
public function __construct(private JsonSchemaValidatorContractInterface $myAccountContract)
{
}
public static function getSubscribedEvents(): array
{
return [
KernelEvents::CONTROLLER => 'onKernelController',
KernelEvents::RESPONSE => 'onKernelResponse',
];
}
public function onKernelController(ControllerEvent $event): void
{
if ($event->getController() instanceof ErrorController) {
return;
}
$request = $event->getRequest();
$path = $this->myAccountContract->getContractFile(); // '/some/path/my-contract.yaml'
$validatorFactory = new ValidatorFactory();
$validator = $validatorFactory->build($path);
$validator->validate($request, $request->getPathInfo(), $request->getMethod());
}
public function onKernelResponse(ResponseEvent $event): void
{
$request = $event->getRequest();
$response = $event->getResponse();
$path = $this->myAccountContract->getContractFile(); // '/some/path/my-contract.yaml'
$validatorFactory = new ValidatorFactory();
$validator = $validatorFactory->build($path);
$validator->validate($response, $request->getPathInfo(), $request->getMethod());
}<?php
use Nayzo\JsonSchemaValidatorBundle\Contract\JsonSchemaValidatorContractInterface;
public function __construct(
private JsonSchemaValidatorContractInterface $myAccountContract, // represent "my_account" in "resources" configuration
private JsonSchemaValidatorContractInterface $mySecondAccountContract, // represent "my_second_account" in "resources" configuration
) {
}
public function something(): array
{
$this->myAccountContract->getContractFile(); // '/some/path/my-contract.yaml'
$this->mySecondAccountContract->getContractFile(); // '/some/path/my-second-contract.yaml'
}
// Note: the "Contract" suffix must be added to the contract variable to be loaded correctly.By default, the value of the enable_default_validation_exception_subscriber flag is set to false. If activated (set to true), the default validation exception subscriber will be triggered and executed.
To use your own custom validation exception subscriber, you must disable the enable_default_validation_exception_subscriber flag by setting its value to false and implement a subscriber that listens to kernel.exception events.
Be aware that when an exception is thrown Before the validation of the request or response implemented by the JsonSchemaValidatorBundle (for example, an access denied), it will be directly intercepted by the application's or framework's kernel.exception and will not be captured by the bundle's validation workflow.
Official OpenAPI documentation here:
OpenAPI Specification (official): ➡️ https://spec.openapis.org/oas/v3.0.1.html
OpenAPI Guide (Swagger): ➡️ https://swagger.io/specification
openapi: 3.0.0
info:
title: 'Some Title'
version: 1.0.0
paths:
/v1/foo:
get:
summary: 'Some summary'
description: 'Some description'
parameters:
- name: uuid
in: query
required: true
schema:
type: string
responses:
'200':
description: 'Some description'
content:
application/json:
schema:
$ref: '#/components/schemas/CustomComponent'
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Resource Not Found
'422':
description: Unprocessable Content
'500':
description: Internal server error
post:
summary: 'Some summary'
description: 'Some description'
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- name
properties:
name:
type: string
responses:
'200':
description: 'Some description'
content:
application/json:
schema:
$ref: '#/components/schemas/CustomComponent'
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Resource Not Found
'422':
description: Unprocessable Content
'500':
description: Internal server error
components:
schemas:
CustomComponent:
type: object
additionalProperties: false
required:
- id
- name
- status
properties:
id:
type: integer
name:
type: string
status:
type: string
enum: [enabled, disabled, deleted]