api-quality-spectral-ruleset 1.6.0-beta.2 → 1.6.1

package/apq-spectral.yaml

@@ -53,6 +53,7 @@ functions:
   - apq-wso2-auth-type-required
   - apq-response-content-required
   - apq-tags-consistency
+  - apq-forbidden-title-pattern
 rules:
   apiq:OAR001:
     description: "For security reasons and as a REST best practice, the HTTPS protocol is mandatory."
@@ -438,10 +439,10 @@ rules:
       functionOptions:
         notMatch: "^(Accept|Content-Type|Authorization)$"
   apiq:OAR034:
-    description: "A paged response must comply with the standard paging schema (start, limit, links with self/previous/next, numPages, total)."
-    message: "OAR034: Paged response schema does not match the required standard."
+    description: "GET collection responses must include a paging block that complies with the standard paging schema (required start, limit and links with self/previous/next; optional numPages and total as integers)."
+    message: "{{error}}"
     severity: error
-    given: "$.paths[*][get].responses[?(@property != '204' && @property != '304' && @property != 'default')]..schema"
+    given: "$.paths[*].get.responses[*]"
     then:
       function: apq-paged-response-check
       functionOptions:
@@ -1214,4 +1215,14 @@ rules:
     then:
       function: apq-path-pattern
       functionOptions:
-        pattern: "^/"
+        pattern: "^/"
+  apiq:OAR117:
+    description: "The API title must not match the configured forbidden regular expression."
+    message: "{{error}}"
+    documentationUrl: "https://github.com/apiaddicts/apquality-spectral/blob/main/docs/resources/OAR117.md"
+    severity: error
+    given: "$.info.title"
+    then:
+      function: apq-forbidden-title-pattern
+      functionOptions:
+        forbidden-pattern: "(?!)"

package/functions/apq-forbidden-title-pattern.js

@@ -0,0 +1,61 @@
+const INLINE_FLAGS_REGEX = /^\(\?([a-zA-Z]+)\)/;
+const SUPPORTED_INLINE_FLAGS = 'imsu';
+
+/**
+ * @param {string} pattern configured regular expression
+ * @returns {RegExp|null} the matcher, or null when the pattern is empty or not valid
+ */
+function buildRegex(pattern) {
+  let source = pattern;
+  let flags = '';
+
+  const inline = INLINE_FLAGS_REGEX.exec(source);
+  if (inline) {
+    const requested = inline[1].toLowerCase();
+    if ([...requested].every((flag) => SUPPORTED_INLINE_FLAGS.includes(flag))) {
+      flags = [...new Set(requested)].join('');
+      source = source.slice(inline[0].length);
+    }
+  }
+
+  if (source === '') {
+    return null;
+  }
+
+  try {
+    return new RegExp(source, flags);
+  } catch (e) {
+    return null;
+  }
+}
+
+/**
+ * @param {unknown} targetVal value of `info.title`
+ * @param {object} options
+ * @param {string} options['forbidden-pattern'] regular expression that raises an issue when it
+ *   matches the title
+ * @param {import('@stoplight/spectral-core').RulesetFunctionContext} context
+ * @returns {Array<{message: string, path: Array}>}
+ */
+module.exports = (targetVal, options, context) => {
+  if (typeof targetVal !== 'string') {
+    return [];
+  }
+
+  const patternStr = options && options['forbidden-pattern'];
+  if (typeof patternStr !== 'string' || patternStr === '') {
+    return [];
+  }
+
+  const regex = buildRegex(patternStr);
+  if (regex === null || !regex.test(targetVal)) {
+    return [];
+  }
+
+  return [
+    {
+      message: `OAR117: Title '${targetVal}' matches the forbidden pattern: ${patternStr}`,
+      path: (context && context.path) || []
+    }
+  ];
+};

package/functions/apq-paged-response-check.js

@@ -1,124 +1,255 @@
-module.exports = (schema, options = {}, context) => {
-  const results = [];
+const DEFAULT_PAGING_SCHEMA = {
+  type: 'object',
+  properties: {
+    numPages: { type: 'integer' },
+    total: { type: 'integer' },
+    start: { type: 'integer' },
+    limit: { type: 'integer' },
+    links: {
+      type: 'object',
+      properties: {
+        next: { type: 'object', properties: { href: { type: 'string' } } },
+        previous: { type: 'object', properties: { href: { type: 'string' } } },
+        last: { type: 'object', properties: { href: { type: 'string' } } },
+        self: { type: 'object', properties: { href: { type: 'string' } } },
+        first: { type: 'object', properties: { href: { type: 'string' } } },
+      },
+      required: ['self', 'previous', 'next'],
+    },
+  },
+  required: ['start', 'limit', 'links'],
+  pagingPropertyName: 'paging',
+};
 
-  if (!schema || typeof schema !== 'object') {
-    return results;
-  }
+const DEFAULT_PAGING_PROPERTY = 'paging';
+
+const COLLECTION_PROPERTY_NAMES = ['data', 'items', 'results', 'content', 'elements', 'records', 'entries', 'values', 'list', 'rows', 'payload'];
 
-  // Parse paging schema from options
-  let pagingSchema = {};
+const SUCCESS_CODE_REGEX = /^2(\d\d|XX)$/i;
+const NO_CONTENT_CODE = '204';
+const DETAIL_PATH_REGEX = /\/\{[^}]+\}$/;
+
+const isObject = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
+
+const parsePagingSchema = (raw) => {
+  if (isObject(raw)) return raw;
+  if (typeof raw !== 'string' || raw.trim() === '') return DEFAULT_PAGING_SCHEMA;
   try {
-    const pagingSchemaStr = options['paging-schema'] || defaultPagingSchema;
-    pagingSchema = typeof pagingSchemaStr === 'string'
-      ? JSON.parse(pagingSchemaStr)
-      : pagingSchemaStr;
+    const parsed = JSON.parse(raw);
+    return isObject(parsed) ? parsed : DEFAULT_PAGING_SCHEMA;
   } catch (err) {
-    return [{
-      message: `${context.rule.name.split(':').pop()}: Invalid paging-schema configuration: ${err.message}`,
-      path: context.path,
-    }];
+    return DEFAULT_PAGING_SCHEMA;
   }
+};
 
-  const pagingPropertyName = pagingSchema.pagingPropertyName || 'paging';
-  const requiredFields = pagingSchema.required || [];
-  const properties = pagingSchema.properties || {};
+const declaredTypes = (schema) => {
+  if (!isObject(schema)) return [];
+  if (typeof schema.type === 'string') return [schema.type];
+  if (Array.isArray(schema.type)) return schema.type.filter((t) => typeof t === 'string');
+  return [];
+};
+
+const isNullSchema = (schema) => {
+  const types = declaredTypes(schema);
+  return types.length > 0 && types.every((t) => t === 'null');
+};
 
-  // Check if schema doesn't have properties at all - skip validation
-  if (!schema.properties) {
-    return results;
+const unwrapNullable = (schema, schemaPath) => {
+  let current = schema;
+  let currentPath = schemaPath;
+  const seen = new Set();
+  while (isObject(current) && !seen.has(current)) {
+    seen.add(current);
+    const key = ['oneOf', 'anyOf'].find((k) => Array.isArray(current[k]));
+    if (!key || current.properties || current.items || current.allOf) break;
+    const branches = current[key].map((branch, index) => ({ branch, index })).filter(({ branch }) => !isNullSchema(branch));
+    if (branches.length !== 1) break;
+    currentPath = [...currentPath, key, branches[0].index];
+    current = branches[0].branch;
   }
+  return { schema: current, path: currentPath };
+};
+
+const buildView = (schema, schemaPath) => {
+  const root = unwrapNullable(schema, schemaPath);
+  const view = {
+    types: new Set(),
+    properties: new Map(),
+    required: new Set(),
+    items: null,
+    path: root.path,
+    rootSchema: root.schema,
+    propertiesPath: null,
+    requiredPath: null,
+  };
+  const visited = new Set();
+
+  const collect = (node, nodePath) => {
+    const unwrapped = unwrapNullable(node, nodePath);
+    const current = unwrapped.schema;
+    const currentPath = unwrapped.path;
+    if (!isObject(current) || visited.has(current)) return;
+    visited.add(current);
 
-  // Check if schema has the paging property
-  if (!schema.properties[pagingPropertyName]) {
-    // Only flag if schema looks like it should have paging (has data/items/results arrays)
-    const hasArrayProperty = Object.values(schema.properties || {}).some(
-      prop => prop && prop.type === 'array'
-    );
-
-    if (hasArrayProperty) {
-      results.push({
-        message: `${context.rule.name.split(':').pop()}: Response must include '${pagingPropertyName}' property for pagination`,
-        path: context.path,
+    declaredTypes(current).filter((t) => t !== 'null').forEach((t) => view.types.add(t));
+
+    if (isObject(current.properties)) {
+      if (!view.propertiesPath) view.propertiesPath = [...currentPath, 'properties'];
+      Object.entries(current.properties).forEach(([name, propertySchema]) => {
+        if (!view.properties.has(name)) {
+          view.properties.set(name, { schema: propertySchema, path: [...currentPath, 'properties', name] });
+        }
       });
     }
-    return results;
+
+    if (Array.isArray(current.required)) {
+      if (!view.requiredPath) view.requiredPath = [...currentPath, 'required'];
+      current.required.filter((name) => typeof name === 'string').forEach((name) => view.required.add(name));
+    }
+
+    if (isObject(current.items) && !view.items) {
+      view.items = { schema: current.items, path: [...currentPath, 'items'] };
+    }
+
+    if (Array.isArray(current.allOf)) {
+      current.allOf.forEach((member, index) => collect(member, [...currentPath, 'allOf', index]));
+    }
+  };
+
+  collect(root.schema, root.path);
+
+  if (view.types.size === 0) {
+    if (view.properties.size > 0) view.types.add('object');
+    else if (view.items) view.types.add('array');
   }
+  return view;
+};
+
+const expectedType = (template) => {
+  const types = declaredTypes(template).filter((t) => t !== 'null' && t !== 'any');
+  if (types.length > 0) return types[0];
+  if (isObject(template.properties) || Array.isArray(template.required)) return 'object';
+  if (isObject(template.items)) return 'array';
+  return null;
+};
+
+const typeMatches = (expected, actualTypes) => {
+  if (!expected || actualTypes.size === 0) return true;
+  if (actualTypes.has(expected)) return true;
+  return expected === 'number' && actualTypes.has('integer');
+};
+
+const isArrayView = (view) => view.types.has('array');
 
-  const pagingObj = schema.properties[pagingPropertyName];
+const typePath = (view) => (isObject(view.rootSchema) && view.rootSchema.type !== undefined ? [...view.path, 'type'] : view.path);
 
-  // Validate paging object structure
-  if (!pagingObj.properties) {
-    results.push({
-      message: `${context.rule.name.split(':').pop()}: '${pagingPropertyName}' must be an object with required properties`,
-      path: [...context.path, 'properties', pagingPropertyName],
-    });
-    return results;
+const findCollectionProperty = (view) => {
+  for (const [name, property] of view.properties) {
+    if (COLLECTION_PROPERTY_NAMES.includes(name.toLowerCase()) && isArrayView(buildView(property.schema, property.path))) {
+      return name;
+    }
   }
+  return null;
+};
+
+const validateAgainstTemplate = (template, view, label, report) => {
+  if (!isObject(template)) return;
+  const type = expectedType(template);
 
-  // Check required fields
-  const missingFields = [];
-  for (const requiredField of requiredFields) {
-    if (!pagingObj.properties[requiredField]) {
-      missingFields.push(requiredField);
+  if (type === 'array') {
+    if (isObject(template.items) && view.items) {
+      validateAgainstTemplate(template.items, buildView(view.items.schema, view.items.path), `${label}[]`, report);
     }
+    return;
   }
+  if (type !== 'object') return;
+
+  const requiredNames = Array.isArray(template.required) ? template.required.filter((name) => typeof name === 'string') : [];
+  const missing = requiredNames.filter((name) => !view.properties.has(name));
+  const notMarked = requiredNames.filter((name) => view.properties.has(name) && !view.required.has(name));
 
-  if (missingFields.length > 0) {
-    results.push({
-      message: `${context.rule.name.split(':').pop()}: Paging object must include required fields: ${missingFields.join(', ')}`,
-      path: [...context.path, 'properties', pagingPropertyName, 'properties'],
-    });
+  if (missing.length > 0) {
+    report(`'${label}' must include required properties: ${missing.join(', ')}`, view.propertiesPath || view.path);
+  }
+  if (notMarked.length > 0) {
+    report(`'${label}' must list as required: ${notMarked.join(', ')}`, view.requiredPath || view.path);
   }
 
-  // Special validation for links object if it's required
-  if (requiredFields.includes('links') && pagingObj.properties.links) {
-    const linksObj = pagingObj.properties.links;
-    if (linksObj.properties) {
-      const requiredLinks = ['self', 'previous', 'next']; // From default schema
-      const linksRequired = linksObj.required || [];
-
-      for (const requiredLink of requiredLinks) {
-        if (!linksObj.properties[requiredLink]) {
-          results.push({
-            message: `${context.rule.name.split(':').pop()}: Links object must include '${requiredLink}' property`,
-            path: [...context.path, 'properties', pagingPropertyName, 'properties', 'links', 'properties'],
-          });
-        }
-      }
+  if (!isObject(template.properties)) return;
+  Object.entries(template.properties).forEach(([name, childTemplate]) => {
+    const property = view.properties.get(name);
+    if (!property || !isObject(childTemplate)) return;
+    const childView = buildView(property.schema, property.path);
+    const childType = expectedType(childTemplate);
+    if (!typeMatches(childType, childView.types)) {
+      report(`'${label}.${name}' must be of type ${childType}`, typePath(childView));
+      return;
+    }
+    validateAgainstTemplate(childTemplate, childView, `${label}.${name}`, report);
+  });
+};
+
+const responseSchemas = (response, responsePath, isOas2) => {
+  if (isOas2) {
+    return isObject(response.schema) ? [{ schema: response.schema, path: [...responsePath, 'schema'] }] : [];
+  }
+  if (!isObject(response.content)) return [];
+  return Object.entries(response.content)
+    .filter(([, mediaType]) => isObject(mediaType) && isObject(mediaType.schema))
+    .map(([mediaTypeName, mediaType]) => ({ schema: mediaType.schema, path: [...responsePath, 'content', mediaTypeName, 'schema'] }));
+};
+
+/**
+ * @param {object} response - a resolved response of a GET operation
+ * @param {object} options - { 'paging-schema': JSON string or object }
+ * @param {import('@stoplight/spectral-core').RulesetFunctionContext} context
+ */
+module.exports = (response, options = {}, context) => {
+  if (!isObject(response)) return [];
+
+  const responsePath = context.path || [];
+  const statusCode = String(responsePath[responsePath.length - 1]);
+  if (!SUCCESS_CODE_REGEX.test(statusCode) || statusCode === NO_CONTENT_CODE) return [];
+
+  const pathKey = typeof responsePath[1] === 'string' ? responsePath[1] : '';
+  const isDetailPath = DETAIL_PATH_REGEX.test(pathKey);
+
+  const pagingSchema = parsePagingSchema((options || {})['paging-schema']);
+  const pagingPropertyName = typeof pagingSchema.pagingPropertyName === 'string' && pagingSchema.pagingPropertyName.trim() !== ''
+    ? pagingSchema.pagingPropertyName.trim()
+    : DEFAULT_PAGING_PROPERTY;
 
-      // Check if links has required array
-      if (!linksRequired.includes('self') || !linksRequired.includes('previous') || !linksRequired.includes('next')) {
-        results.push({
-          message: `${context.rule.name.split(':').pop()}: Links object must require 'self', 'previous', and 'next'`,
-          path: [...context.path, 'properties', pagingPropertyName, 'properties', 'links'],
-        });
+  const document = context.document && context.document.data;
+  const isOas2 = isObject(document) && typeof document.swagger === 'string';
+  const ruleCode = context.rule && context.rule.name ? context.rule.name.split(':').pop() : 'OAR034';
+
+  const results = [];
+  const report = (message, path) => results.push({ message: `${ruleCode}: ${message}`, path });
+
+  responseSchemas(response, responsePath, isOas2).forEach(({ schema, path }) => {
+    const view = buildView(schema, path);
+    const paging = view.properties.get(pagingPropertyName);
+
+    if (!paging) {
+      if (isDetailPath) return;
+      if (isArrayView(view)) {
+        report(`Collection response must be an object with a '${pagingPropertyName}' property, not a top-level array`, view.path);
+        return;
+      }
+      const collectionProperty = findCollectionProperty(view);
+      if (collectionProperty) {
+        report(`Response with collection property '${collectionProperty}' must include '${pagingPropertyName}' property for pagination`, view.path);
       }
+      return;
     }
-  }
+
+    const pagingView = buildView(paging.schema, paging.path);
+    if (!typeMatches('object', pagingView.types)) {
+      report(`'${pagingPropertyName}' must be of type object`, typePath(pagingView));
+      return;
+    }
+    validateAgainstTemplate(pagingSchema, pagingView, pagingPropertyName, report);
+  });
 
   return results;
 };
-
-// Default paging schema matching Java implementation
-const defaultPagingSchema = JSON.stringify({
-  type: 'object',
-  properties: {
-    numPages: { type: 'integer' },
-    total: { type: 'integer' },
-    start: { type: 'integer' },
-    limit: { type: 'integer' },
-    links: {
-      type: 'object',
-      properties: {
-        next: { type: 'object', properties: { href: { type: 'string' } } },
-        previous: { type: 'object', properties: { href: { type: 'string' } } },
-        last: { type: 'object', properties: { href: { type: 'string' } } },
-        self: { type: 'object', properties: { href: { type: 'string' } } },
-        first: { type: 'object', properties: { href: { type: 'string' } } },
-      },
-      required: ['self', 'previous', 'next'],
-    },
-  },
-  required: ['start', 'limit', 'links'],
-  pagingPropertyName: 'paging',
-});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "api-quality-spectral-ruleset",
-  "version": "1.6.0-beta.2",
+  "version": "1.6.1",
   "description": "Spectral ruleset by API Quality",
   "main": "apq-spectral.yaml",
   "files": [