package io.dropwizard.jersey.validation;
import io.dropwizard.validation.ConstraintViolations;
import io.dropwizard.validation.Validated;
import org.glassfish.jersey.server.internal.inject.ConfiguredValidator;
import org.glassfish.jersey.server.model.Invocable;
import org.glassfish.jersey.server.model.Parameter;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import javax.validation.ConstraintViolation;
import javax.validation.ConstraintViolationException;
import javax.validation.Validator;
import javax.validation.executable.ExecutableValidator;
import javax.validation.groups.Default;
import javax.validation.metadata.BeanDescriptor;
import javax.ws.rs.WebApplicationException;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.HashSet;
import java.util.List;
import java.util.Set;
import static java.util.Objects.requireNonNull;
public class DropwizardConfiguredValidator implements ConfiguredValidator {
private static final Logger LOGGER = LoggerFactory.getLogger(DropwizardConfiguredValidator.class);
private final Validator validator;
public DropwizardConfiguredValidator(Validator validator) {
this.validator = requireNonNull(validator);
}
@Override
public void validateResourceAndInputParams(Object resource, final Invocable invocable, Object[] objects)
throws ConstraintViolationException {
final Class<?>[] groups = getGroup(invocable);
final Set<ConstraintViolation<Object>> violations = new HashSet<>();
final BeanDescriptor beanDescriptor = getConstraintsForClass(resource.getClass());
if (beanDescriptor.isBeanConstrained()) {
violations.addAll(validate(resource, groups));
}
violations.addAll(forExecutables().validateParameters(resource, invocable.getHandlingMethod(), objects, groups));
if (!violations.isEmpty()) {
throw new JerseyViolationException(violations, invocable);
}
}
private Class<?>[] getGroup(Invocable invocable) {
final List<Class<?>[]> groups = new ArrayList<>();
for (Parameter parameter : invocable.getParameters()) {
if (parameter.isAnnotationPresent(Validated.class)) {
groups.add(parameter.getAnnotation(Validated.class).value());
}
}
switch (groups.size()) {
case 0: return new Class<?>[] {Default.class};
case 1: return groups.get(0);
default:
for (int i = 0; i < groups.size(); i++) {
for (int j = i; j < groups.size(); j++) {
if (!Arrays.deepEquals(groups.get(i), groups.get(j))) {
throw new WebApplicationException("Parameters must have the same validation groups in " +
invocable.getHandlingMethod().getName(), 500);
}
}
}
return groups.get(0);
}
}
@Override
public void validateResult(Object resource, Invocable invocable, Object returnValue)
throws ConstraintViolationException {
final Class<?>[] groups;
if (invocable.getHandlingMethod().isAnnotationPresent(Validated.class)) {
groups = invocable.getHandlingMethod().getAnnotation(Validated.class).value();
} else {
groups = new Class<?>[]{Default.class};
}
final Set<ConstraintViolation<Object>> violations =
forExecutables().validateReturnValue(resource, invocable.getHandlingMethod(), returnValue, groups);
if (!violations.isEmpty()) {
LOGGER.trace("Response validation failed: {}", ConstraintViolations.copyOf(violations));
throw new JerseyViolationException(violations, invocable);
}
}
@Override
public <T> Set<ConstraintViolation<T>> validate(T t, Class<?>... classes) {
return validator.validate(t, classes);
}
@Override
public <T> Set<ConstraintViolation<T>> validateProperty(T t, String s, Class<?>... classes) {
return validator.validateProperty(t, s, classes);
}
@Override
public <T> Set<ConstraintViolation<T>> validateValue(Class<T> aClass, String s, Object o, Class<?>... classes) {
return validator.validateValue(aClass, s, o, classes);
}
@Override
public BeanDescriptor getConstraintsForClass(Class<?> aClass) {
return validator.getConstraintsForClass(aClass);
}
@Override
public <T> T unwrap(Class<T> aClass) {
return validator.unwrap(aClass);
}
@Override
public ExecutableValidator forExecutables() {
return validator.forExecutables();
}
}