README

Symfony Bundle which provides base foundation for REST API applications. Features include:

Exception converter: transforms exceptions and errors to structured responses (JSON, XML).
(Deprecated since v0.3) Request body deserializer: RESTfull decoding of HTTP request body and Accept headers.
(Deprecated since v0.3) Failing validator: data validator integrated with Exception converter.
Possibility to check Api zone using Request attribute.
Since Symfony 6.3 support: MapRequestPayload, MapQueryString, MapQueryParameter

Installation

Step 1: Install the bundle

$ composer require visual-craft/rest-base-bundle

Step 2: Enable the bundle

If you are not using Flex, you also have to enable the bundle by adding the following line in the app/AppKernel.php:

<?php
// AppKernel.php

// ...
use VisualCraft\RestBaseBundle\VisualCraftRestBaseBundle;

class AppKernel extends Kernel
{
    public function registerBundles()
    {
        return [
            // ...
            new VisualCraftRestBaseBundle(),
            // ...
        ];
    }
}

Serializer

By default, additional attributes that are not mapped to the denormalized object will be ignored by the Serializer component. If you prefer to throw an exception when this happens, set the allow_extra_attributes context option to false:

# config/packages/framework.yaml

framework:
    serializer:
        default_context:
            allow_extra_attributes: false

Errors

Configuration

Using the zone configuration, you can specify zones of application where error converter enabled.

Example:

#config/packages/rest-base.php
visual_craft_rest_base:
    zone:
        -
            path: '^/api/'
            host: null
            methods: []
            ips: []

Supported exceptions

Symfony\Component\Security\Core\Exception\AuthenticationException

All authentication exceptions.

Response body:

{
  "title": "Authentication error: An authentication exception occurred.",
  "statusCode": 401,
  "type": "authentication_error",
  "details": []
}

Symfony\Component\HttpKernel\Exception\HttpExceptionInterface

HTTP error exceptions.

Response body:

{
  "title": "HTTP error: Not Found",
  "statusCode": 404,
  "type": "http_error",
  "details": []
}

Previous exceptions before HttpException:

Symfony\Component\Serializer\Exception\UnsupportedFormatException

Response body:

{
  "title": "Invalid request content type",
  "statusCode": 400,
  "type": "invalid_request_content_type",
  "details": []
}

Symfony\Component\Validator\Exception\ValidationFailedException

Response body:

{
  "title": "Validation error",
  "statusCode": 400,
  "type": "validation_error",
  "details": {
    "cause": "validation_error",
    "violations": {
      //serialized by symfony/serializer ConstraintViolationList
    }
  }
}

VisualCraft\RestBaseBundle\Problem\ExceptionToProblemConverters\InsufficientAuthenticationException

Thrown if the user credentials are not sufficiently trusted. This is the case when a user is anonymous and the resource to be displayed has an access role.

Response body:

{
  "title": "Insufficient authentication error: Not privileged to request the resource.",
  "statusCode": 401,
  "type": "insufficient_authentication_error",
  "details": []
}

(Deprecated since v0.3) VisualCraft\RestBaseBundle\Exceptions\InvalidRequestException

Base exception thrown if request body are invalid.

Response body:

{
  "title": "Invalid request",
  "statusCode": 400,
  "type": "invalid_request",
  "details": []
}

(Deprecated since v0.3) VisualCraft\RestBaseBundle\Exceptions\InvalidRequestBodyFormatException

Extends from InvalidRequestException. Thrown when symfony/serializer can't deserialize request body.

Response body:

{
  "title": "Invalid request body format",
  "statusCode": 400,
  "type": "invalid_request_body_format",
  "details": {
    "cause": "unexpected_value"
  }
}

"cause" field values:

"unexpected_value" if data fields have invalid values
"extra_attributes" if request body have extra attributes

(Deprecated since v0.3) VisualCraft\RestBaseBundle\Exceptions\InvalidRequestContentTypeException

Extends from InvalidRequestException. Thrown when no content type parameter are not pointed or content type have unsupported value.

Response body:

{
  "title": "Invalid request content type",
  "statusCode": 400,
  "type": "invalid_request_content_type",
  "details": {
    "code": "unsupported",
    "valid_content_types": ["application/json'"]
  }
}

"code" field values:

"missing" : if content type are not pointed
"unsupported" : if content have unsupported value

(Deprecated since v0.3) VisualCraft\RestBaseBundle\Exceptions\ValidationErrorException

Response body:

{
  "title": "Validation error",
  "statusCode": 400,
  "type": "validation_error",
  "details": {
    "violations": {
        //serialized by symfony/serializer ConstraintViolationList
    }
  }
}

Symfony\Component\Serializer\Exception\ExtraAttributesException

Response body:

{
  "title": "Invalid request body format",
  "statusCode": 400,
  "type": "invalid_request_body_format",
  "details": {
    "cause": "extra_attributes"
  }
}

Symfony\Component\Serializer\Exception\UnexpectedValueException

Response body:

{
  "title": "Invalid request body format",
  "statusCode": 400,
  "type": "invalid_request_body_format",
  "details": {
    "cause": "unexpected_value"
  }
}

Symfony\Component\Security\Core\Exception\TooManyLoginAttemptsAuthenticationException

Response body:

{
  "title": "Login rate limit exceeded",
  "statusCode": 429,
  "type": "too_many_login_attempts",
}

Response headers:

  X-RateLimit-Retry-After: 300

Enable support security exceptions

If you use separate firewall for your API, use VisualCraft\RestBaseBundle\Security\AuthenticationEntryPoint

#config/packages/security.php
security:
    firewalls:
        main:
            entry_point: 'VisualCraft\RestBaseBundle\Security\AuthenticationEntryPoint'
            //..

If you want to use your custom entry point class, please edit your class next way:

<?php

declare(strict_types=1);

namespace App\Security;

use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;
use VisualCraft\RestBaseBundle\Constants;

class AuthenticationEntryPoint implements AuthenticationEntryPointInterface
{

      private ProblemResponseFactory $problemResponseFactory;

    public function __construct(ProblemResponseFactory $problemResponseFactory)
    {
        $this->problemResponseFactory = $problemResponseFactory;
    }

    public function start(Request $request, AuthenticationException $authException = null): Response
    {
        if ($request->attributes->get(Constants::API_ZONE_ATTRIBUTE)) {
             return $this->problemResponseFactory->create($authException ?? new AuthenticationException('Authentication required'));
        }

        // Not API zone handle
    }
}

If Authenticator is used in API, use VisualCraft\RestBaseBundle\Security\AuthenticationFailureHandler for auth error converting

#config/packages/security.php
security:
    firewalls:
        main:
            json_login:
                # ....
                failure_handler: 'VisualCraft\RestBaseBundle\Security\AuthenticationFailureHandler'

Support custom exception

You can create and add your own exceptions and convertors for them.

Create your exception

<?php

declare(strict_types=1);

namespace App\Exceptions;

class CustomException extends \RuntimeException
{
    private string $customField;

    public function __construct(string $customField, $message = "")
    {
        parent::__construct($message);
        $this->customField = $customField;
    }

    public function getCustomField(): string
    {
        return $this->customField;
    }
}

Create converter (implement VisualCraft\RestBaseBundle\Problem\ExceptionToProblemConverterInterface)

<?php
//src/Problem/ExceptionToProblemConverters/InvalidRequestBodyFormatExceptionConverter.php

declare(strict_types=1);

namespace VisualCraft\RestBaseBundle\Problem\ExceptionToProblemConverters;

use Symfony\Component\HttpFoundation\Response;
use VisualCraft\RestBaseBundle\Problem\ExceptionToProblemConverterInterface;
use VisualCraft\RestBaseBundle\Problem\Problem;

class CustomExceptionConverter implements ExceptionToProblemConverterInterface
{
    public function convert(\Throwable $exception): ?Problem
    {
        if (!$exception instanceof CustomException) {
            return null;
        }

        $result = new Problem(
            'Custom exception title',
            Response::HTTP_BAD_REQUEST,
            'custom_exception_type'
        );
        $result->addDetails('customField', $exception->getCustomField());

        return $result;
    }
}

Register your class as a service and tag it with visual_craft.rest_base.exception_to_problem_converter. If you're using autoconfiguration, Symfony will automatically add this tag.

Throw exception

<?php
//src/Controller

use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Request;

class ThrowInvalidRequestExceptionController extends AbstractController
{
    public function __invoke(Request $request): void
    {
        //..
        throw new CustomException('custom field value');
        //..
    }
}

Response body

{
    "title" : "Custom exception title",
    "statusCode" : 400,
    "type" : "custom_exception_type",
    "details" : {
        "customField" : "custom field value"
    }
}

Request Body Deserializer

Api Body Deserializer contains:

detect and check deserialization format
deserialize using symfony/serializer and handle exceptions
validate using Failing validator

Example:

<?php
// src/Controller/ProcessRequestController.php

use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpFoundation\Request;
use VisualCraft\RestBaseBundle\Request\RequestBodyDeserializer;

class ProcessRequestController extends AbstractController
{
    private RequestBodyDeserializer $deserializer;

    public function __construct(RequestBodyDeserializer $deserializer)
    {
        $this->deserializer = $deserializer;
    }

    public function __invoke(Request $request): Response
    {
        //..
        $testDto = $this->deserializer->deserialize($request, Dto::class);
        //..
    }
}

Content type configuration

#config/packages/rest-base.php
visual_craft_rest_base:
    mimeTypes:
        json: 'application/json'
        //..

Debug

To enable exception stack trace in error response body needed to change config:

#config/packages/rest-base.php
visual_craft_rest_base:
    debug: true

Error response example:

{
    // ....
    "details": {
        "exception": {
            "class": "Namespace\\ExceptionClass",
            "message": "Exception message",
            "stack_trace": "Stack trace as a string"
        },
        "previous_exception_1": {
            "class": "Namespace\\PrevExceptionClass",
            "message": "Prev exception message",
            "stack_trace": "Prev stack trace as a string"
        }
        // ....
    }
}

Failing Validator

Bundle also provides Failing Validator which validates your data. In case of validation violations it throws exception which are supported by Exception converter, so you will receive structured response when data is not valid:

<?php
// src/Controller/ProcessRequestController.php

use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpFoundation\Request;
use VisualCraft\RestBaseBundle\Request\RequestBodyDeserializer;

class ProcessRequestController extends AbstractController
{
    private FailingValidator $validator;

    public function __construct(
        FailingValidator $validator
    ) {
        $this->validator = $validator;
    }

    public function __invoke(Request $request): Response
    {
        //..
        $this->validator->validate($data);
        //..
    }
}

Tests

$ vendor/bin/simple-phpunit install
$ vendor/bin/simple-phpunit

Additional Tools

$ composer install
$ vendor/bin/php-cs-fixer fix
$ vendor/bin/psalm

License

This bundle is released under the MIT license. See the complete license in the file: LICENSE

visual-craft / rest-base-bundle

Maintainers

Details

README

Installation

Step 1: Install the bundle

Step 2: Enable the bundle

Serializer

Errors

Configuration

Supported exceptions

Symfony\Component\Security\Core\Exception\AuthenticationException

Symfony\Component\HttpKernel\Exception\HttpExceptionInterface

Previous exceptions before HttpException:

VisualCraft\RestBaseBundle\Problem\ExceptionToProblemConverters\InsufficientAuthenticationException

(Deprecated since v0.3) VisualCraft\RestBaseBundle\Exceptions\InvalidRequestException

(Deprecated since v0.3) VisualCraft\RestBaseBundle\Exceptions\InvalidRequestBodyFormatException

(Deprecated since v0.3) VisualCraft\RestBaseBundle\Exceptions\InvalidRequestContentTypeException

(Deprecated since v0.3) VisualCraft\RestBaseBundle\Exceptions\ValidationErrorException

Symfony\Component\Serializer\Exception\ExtraAttributesException

Symfony\Component\Serializer\Exception\UnexpectedValueException

Symfony\Component\Security\Core\Exception\TooManyLoginAttemptsAuthenticationException

Enable support security exceptions

Support custom exception

Request Body Deserializer

Content type configuration

Debug

Failing Validator

Tests

Additional Tools

License