Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade to Microsoft.OpenApi 2.x and support OpenAPI v3.1 #59480

Merged
merged 10 commits into from
Jan 14, 2025

Conversation

captainsafia
Copy link
Member

@captainsafia captainsafia commented Dec 14, 2024

Contributes towards #58619.

This PR updates our Microsoft.OpenApi dependency to the new major version (v2) to support Open API v3.1.

Changes in this PR include:

  • Using the new JsonSchemaType enum to represent schema types
  • Removing IOpenApiAny in favor of JsonNode per the change in the Microsoft.OpenApi library
  • Updates to code for parsing OpenAPI documents to use the new APIs

The biggest functional change in this PR is the removal of the OpenApiSchemaStore class in favor of the new OpenApiSchemaReference type. The OpenApiSchemaStore was our previous strategy of maintaining resolved references to OpenAPI schemas and their reference IDs. The OpenApiSchemaReference type supports this behavior by allowing you to hold a reference to a schema and support resolving that schema in one.

This change means that we can store schemas directly in the OpenApiDocument.Components.Schemas property and provide resolved references to them for use in transformers without additional overhead on our part.

This does temporarily introduce a regression into the logic we had for disambiguating duplicate schemas. Moving forward, I'd like to use this as a forcing function to implement the comparers in the Microsoft.OpenApi library (see microsoft/OpenAPI.NET#414) and avoid the overhead of having to maintain the comparers in our own codebase (removed here).

Another note: this change just lays the groundwork for this upgrade. There's still some more work required to support actual JSON schema features, like changing the way that nullability is modeled to use the type property or taking advantage of the const keyword. These changes will happen in follow up PRs.

@captainsafia captainsafia requested review from a team and wtgodbe as code owners December 14, 2024 00:30
@dotnet-issue-labeler dotnet-issue-labeler bot added the area-web-frameworks *DEPRECATED* This label is deprecated in favor of the area-mvc and area-minimal labels label Dec 14, 2024
@captainsafia captainsafia added area-mvc Includes: MVC, Actions and Controllers, Localization, CORS, most templates feature-openapi area-minimal Includes minimal APIs, endpoint filters, parameter binding, request delegate generator etc and removed area-web-frameworks *DEPRECATED* This label is deprecated in favor of the area-mvc and area-minimal labels labels Dec 14, 2024
eng/Versions.props Outdated Show resolved Hide resolved
@captainsafia captainsafia requested a review from Copilot December 14, 2024 00:35

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 38 out of 53 changed files in this pull request and generated no comments.

Files not reviewed (15)
  • eng/Versions.props: Language not supported
  • src/OpenApi/src/Comparers/OpenApiReferenceComparer.cs: Evaluated as low risk
  • src/OpenApi/src/Extensions/OpenApiSchemaExtensions.cs: Evaluated as low risk
  • src/OpenApi/perf/Microbenchmarks/OpenApiSchemaComparerBenchmark.cs: Evaluated as low risk
  • src/OpenApi/src/Comparers/OpenApiSchemaComparer.cs: Evaluated as low risk
  • src/OpenApi/src/Comparers/ComparerHelpers.cs: Evaluated as low risk
  • src/OpenApi/src/Comparers/OpenApiAnyComparer.cs: Evaluated as low risk
  • src/OpenApi/src/Comparers/OpenApiDiscriminatorComparer.cs: Evaluated as low risk
  • src/OpenApi/src/Comparers/OpenApiExternalDocsComparer.cs: Evaluated as low risk
  • src/OpenApi/src/Comparers/OpenApiXmlComparer.cs: Evaluated as low risk
  • src/OpenApi/src/Services/OpenApiOptions.cs: Evaluated as low risk
  • src/OpenApi/sample/Transformers/AddExternalDocsTransformer.cs: Evaluated as low risk
  • src/OpenApi/perf/Microbenchmarks/TransformersBenchmark.cs: Evaluated as low risk
  • src/OpenApi/src/Extensions/OpenApiServiceCollectionExtensions.cs: Evaluated as low risk
  • src/OpenApi/src/Schemas/OpenApiJsonSchema.Helpers.cs: Evaluated as low risk
};
document.Paths = await GetOpenApiPathsAsync(document, scopedServiceProvider, operationTransformers, schemaTransformers, cancellationToken);
document.Tags = document.Tags?.Distinct(OpenApiTagComparer.Instance).ToList();
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I filed microsoft/OpenAPI.NET#1983 to eventually make this a lot smoother.

// resolution of references in the document.
document.Workspace ??= new();
document.Workspace.RegisterComponents(document);
if (document.Components?.Schemas is not null)
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We do this to ensure that the schemas are always ordered lexicographically by reference ID in the document. This was previously done in the OpenApiSchemaReferenceTransformer but since that's been removed in favor of using OpenApiSchemaReference directly, we need to do the sorting somewhere.

@@ -199,7 +200,7 @@ await VerifyOpenApiDocument(builder, options, document =>
});
}

[Fact]
[ConditionalFact(Skip = "https://github.com/dotnet/aspnetcore/issues/58619")]
public async Task HandlesDuplicateSchemaReferenceIdsGeneratedByOverload()
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is one of the tests we have to temporarily skip while we sort out how schema deduping looks in the new model.

@@ -51,13 +51,13 @@ public async Task GetOpenApiParameters_RouteParametersAreAlwaysRequired()
// Assert
await VerifyOpenApiDocument(builder, document =>
{
var pathParameter = Assert.Single(document.Paths["/api/todos/{id}"].Operations[OperationType.Get].Parameters);
var pathParameter = Assert.Single(document.Paths["/api/todos/{id}"].Operations[OperationType.Get].Parameters!);
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Microsoft.OpenApi marks the parameter list property as nullable in the new model so we use a null suppression here and elsewhere to quiet nullability warnings.

I used Assert.NotNull in other places so it's not the most consistent but 🤷🏽 .

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@darrelmiller Based on our discussions of Nullable vs Optional, I would not expect Parameters to be Nullable, since null is not an allowed value for the Parameters field of an Operation object. But perhaps I am still confused about this.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@mikekistler For my edification, are you expected to produce an empty list in the case where an operation has no parameters? Is it possible to omit the parameters field altogether?

@captainsafia
Copy link
Member Author

##[error].packages\system.runtime.compilerservices.unsafe\6.0.0\buildTransitive\netcoreapp2.0\System.Runtime.CompilerServices.Unsafe.targets(4,5): error : System.Runtime.CompilerServices.Unsafe doesn't support netcoreapp2.1. Consider updating your TargetFramework to netcoreapp3.1 or later.

Not sure why we are getting these warnings now. They are coming from the ApiDescription.Server and adjacent dependencies. We're planning on changing this in .NET 10 anyways (see #58353), so I'll go ahead and remove the out-of-support runtime target in this PR.

@@ -86,7 +86,7 @@ internal static void ApplyValidationAttributes(this JsonNode schema, IEnumerable
{
if (attribute is Base64StringAttribute)
{
schema[OpenApiSchemaKeywords.TypeKeyword] = "string";
schema[OpenApiSchemaKeywords.TypeKeyword] = JsonSchemaType.String.ToString();
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it right that this is changing from string to String (and for all these from lower to sentence case)? If it is, maybe using nameof() would be better to avoid the ToString() call at runtime (unless the compiler is smart enough to do that automatically?) when it's a constant value.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it right that this is changing from string to String (and for all these from lower to sentence case)?

Depends on the definition of write. I primarily did this to make the values more resilient to being read by Enum.Parse<JsonSchemaType> without having case-insensitivity configured.

We do set ignoreCase: true everywhere we parse these values and users should never interact with the opaque version of the schema but this feels...safer? 😓

Is it right that this is changing from string to String (and for all these from lower to sentence case)? If it is, maybe using nameof() would be better to avoid the ToString() call at runtime (unless the compiler is smart enough to do that automatically?) when it's a constant value.

The compiler doesn't map ToString to nameof. nameof would work for simple types but things might get funky when we support nullability via the type argument (JsonSchemaType.String | JsonSchemaType.Null) so ToString felt like the best approach to rely on consistently.

document.Components.Schemas ??= new Dictionary<string, OpenApiSchema>();
document.Components.Schemas[schemaId] = schema;
document.Workspace ??= new();
var location = document.BaseUri + "/components/schemas/" + schemaId;
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there any risk here of BaseUri ending with a / and messing up the concatenation?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The BaseUri is currently implicitly configured by OpenAPI.NET (ref). The default value ends with a GUID and no trailing slash. They don't expose a setter for the property and I believe it's primarily there to have a base document URL for resolving schemas so I don't tink the risk is likely.

src/OpenApi/src/Services/OpenApiDocumentService.cs Outdated Show resolved Hide resolved
src/OpenApi/src/Services/Schemas/OpenApiSchemaService.cs Outdated Show resolved Hide resolved
@captainsafia
Copy link
Member Author

@BrennanConroy Can I get your eye on this? I think you have the most context at the moment.

@DeagleGross Some of this code might be new to you but the delta here might be a good opportunity to share some info about the space here.

@dotnet-policy-service dotnet-policy-service bot added the pending-ci-rerun When assigned to a PR indicates that the CI checks should be rerun label Dec 26, 2024
@captainsafia
Copy link
Member Author

/azp run

@dotnet-policy-service dotnet-policy-service bot removed the pending-ci-rerun When assigned to a PR indicates that the CI checks should be rerun label Jan 2, 2025
Copy link

Azure Pipelines successfully started running 3 pipeline(s).

@dotnet-policy-service dotnet-policy-service bot added the pending-ci-rerun When assigned to a PR indicates that the CI checks should be rerun label Jan 9, 2025
@captainsafia captainsafia removed the pending-ci-rerun When assigned to a PR indicates that the CI checks should be rerun label Jan 10, 2025
}
else
{
schema.Type = type;
schema.Type = Enum.Parse<JsonSchemaType>(type, ignoreCase: true);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why ignoreCase here and elsewhere when parsing type? Where does this value of type come from that it might not not be the correct case (and that would be okay)?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

When System.Text.Json gives us the schema type, it is serialized as a string in all lowercase (object, null, array, etc.) The JsonSchemaType enum provided by the OpenAPI uses title casing. Enum.Parse is case-sensitive by default so object won't map to Object unless we use this flag.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The JsonSchemaType enum provided by the OpenAPI uses title casing.

Isn't that a bug?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No, as most enums use title-case (or I guess Pascal scale) for the type names. STJ maps them to an all lower-case identifier here) which is why we get the inconsistency in casing between what Enum.ToString() while generate and what the schema will produce.

{
"name": "Test"
}
"Test"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This does not look right. The top-level Tags field should be an array of TagObjects, not strings.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yep, this is a known bug that I filed on the library over at microsoft/OpenAPI.NET#1991. It was fixed but the version with the fix contains a different bug microsoft/OpenAPI.NET#2055 so I am sticking with the devil I know for now. 😅

@@ -28,12 +28,12 @@
"type": "string",
"externalDocs": {
"description": "Documentation for this OpenAPI schema",
"url": "https://example.com/api/docs/schemas/string"
"url": "https://example.com/api/docs/schemas/String"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This change looks odd. I suppose the URL is made up so there is no right or wrong -- but usually URLs follow conventions, like "all lowercase" (as the previous URL did) or "camel cased segments". Here there is a mix of lowercase and Pascal case, which is ... odd.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yep, this is result of the same reason in #59480 (comment). Because we use JsonSchemaType.String.ToString() the default casing produced is titlecase. We can fix this by just using the literal "string" directly.

Copy link
Contributor

@mikekistler mikekistler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks really good!

I left a few comments (sorry I didn't lump them into a review -- I didn't expect to make so many), but the only one that is a real problem is the way tag objects are not rendered correctly.

Copy link
Contributor

@mikekistler mikekistler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! 👍

I think this can merge as is. Any remaining issues are minor and can be cleaned up in a follow-on PR.

@captainsafia captainsafia merged commit d4880ed into main Jan 14, 2025
27 checks passed
@captainsafia captainsafia deleted the safia/openapi-v2 branch January 14, 2025 15:57
@dotnet-policy-service dotnet-policy-service bot added this to the 10.0-preview1 milestone Jan 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area-minimal Includes minimal APIs, endpoint filters, parameter binding, request delegate generator etc area-mvc Includes: MVC, Actions and Controllers, Localization, CORS, most templates feature-openapi
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants