即使additionalProperties设置为false，Json架构仍允许附加财产

Question

给定以下架构：

export const MESSAGE_SCHEMA = {
  additionalProperties: false,
  type: 'object',
  properties: {
    comment: { type: 'string' },
    startAt: { type: 'string' },
    states: {
      type: 'object',
      minProperties: 1,
      patternProperties: {
        "^[A-Za-z]+[A-Za-z0-9 ]{0,127}$": {
          type: 'object',
          properties: {
            type: { type: 'string', enum: TASK_TYPES_ALL_ENUM },
            next: { type: 'string' },
            end: { type: 'boolean' },
            choices: {
              type: 'array',
              items: {
                type: 'object'
              },
              minItems: 2
            },
            default: { type: 'string' },
            error: { type: 'string' },
            cause: { type: 'string' },
            resource: { type: 'string' },
          },
          required: ['type'],
          allOf: [
            // Make choices required if task type = 'choice'
            {
              if: {
                properties: { type: { const: TASK_TYPE_CHOICE } }
              },
              then: {
                required: ['type', 'choices']
              }
            }
          ]
        }
      },
      additionalProperties: false
    }
  },
  required: ['startAt','states']
};

如果我将有效负载发送到我的API中，其中包含与模式不匹配的“状态”对象中的键，它总是允许请求…我理解的行为应该通过属性/PatelnProperties addtionalProperties=false来防止这种情况，但事实并非如此…

例如-这应该是错误的，因为模式不匹配并且不允许使用其他属性，但我从API收到响应，就好像它已成功验证：

{
    "eventNamespace": "state",
    "eventType": "transition",
    "payload": {
        "foo": "bar"
    },
    "message": {
        "startAt": "foo",
        "states": {
            "!#@^@^": {
                "type": "choice",
                "choices": []
            }
        }
    }
}

如果我随后输入一个与模式匹配的值，则会出现验证失败（如预期的那样）：

{
    "eventNamespace": "state",
    "eventType": "transition",
    "payload": {
        "foo": "bar"
    },
    "message": {
        "startAt": "foo",
        "states": {
            "valid property example": {
                "type": "choice",
                "choices": []
            }
        }
    }
}

响应：

{
    "statusCode": 400,
    "error": "Bad Request",
    "message": "body/message/states/valid property example/choices must NOT have fewer than 2 items"
}

Answer 1

最有可能的是，这是因为Fastify验证器默认删除其他属性。您可以通过设置删除附加：假来禁用此行为：

const server = Fastify({
  ajv: {
    customOptions: {
      removeAdditional: false
    }
  }
})

有关更多信息，请访问https://www . fastify . io/docs/latest/Reference/Validation-and-Serialization/

Answer 2

你的模式很好。当我通过我的验证器运行它时，我得到:

{
  "errors" : [
    {
      "error" : "additional property not permitted",
      "instanceLocation" : "/states/!#@^@^",
      "keywordLocation" : "/properties/states/additionalProperties"
    },
    {
      "error" : "not all additional properties are valid",
      "instanceLocation" : "/states",
      "keywordLocation" : "/properties/states/additionalProperties"
    },
    {
      "error" : "not all properties are valid",
      "instanceLocation" : "",
      "keywordLocation" : "/properties"
    }
  ],
  "valid" : false
}

我建议您为您正在使用的实现打开错误报告。