dendi-wang/thingsboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve validation of request body for Telemetry Rest Calls.

Browse Source
This commit is contained in:
Igor Kulikov 2017-10-10 15:37:25 +03:00
parent 582ef1f63c
commit d644d2d5fd
1 changed files with 22 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
extensions-core/src/main/java/org/thingsboard/server/extensions/core/plugin/telemetry/handlers/TelemetryRestMsgHandler.java
View File

@ -217,7 +217,9 @@ public class TelemetryRestMsgHandler extends DefaultRestMsgHandler {
JsonNode jsonNode = jsonMapper.readTree(request.getRequestBody()); JsonNode jsonNode = jsonMapper.readTree(request.getRequestBody());
if (jsonNode.isObject()) { if (jsonNode.isObject()) {
List<AttributeKvEntry> attributes = extractRequestAttributes(jsonNode); List<AttributeKvEntry> attributes = extractRequestAttributes(jsonNode);
if (!attributes.isEmpty()) { if (attributes.isEmpty()) {
throw new IllegalArgumentException("No attributes data found in request body!");
}
ctx.saveAttributes(ctx.getSecurityCtx().orElseThrow(IllegalArgumentException::new).getTenantId(), entityId, scope, attributes, new PluginCallback<Void>() { ctx.saveAttributes(ctx.getSecurityCtx().orElseThrow(IllegalArgumentException::new).getTenantId(), entityId, scope, attributes, new PluginCallback<Void>() {
@Override @Override
public void onSuccess(PluginContext ctx, Void value) { public void onSuccess(PluginContext ctx, Void value) {
@ -234,7 +236,6 @@ public class TelemetryRestMsgHandler extends DefaultRestMsgHandler {
return true; return true;
} }
} }
}
return false; return false;
} }
@ -269,6 +270,9 @@ public class TelemetryRestMsgHandler extends DefaultRestMsgHandler {
throw new UncheckedApiException(new InvalidParametersException(e.getMessage())); throw new UncheckedApiException(new InvalidParametersException(e.getMessage()));
} }
List<TsKvEntry> entries = new ArrayList<>(); List<TsKvEntry> entries = new ArrayList<>();
if (entries.isEmpty()) {
throw new IllegalArgumentException("No timeseries data found in request body!");
}
for (Map.Entry<Long, List<KvEntry>> entry : telemetryRequest.getData().entrySet()) { for (Map.Entry<Long, List<KvEntry>> entry : telemetryRequest.getData().entrySet()) {
for (KvEntry kv : entry.getValue()) { for (KvEntry kv : entry.getValue()) {
entries.add(new BasicTsKvEntry(entry.getKey(), kv)); entries.add(new BasicTsKvEntry(entry.getKey(), kv));
@ -399,6 +403,8 @@ public class TelemetryRestMsgHandler extends DefaultRestMsgHandler {
ResponseEntity responseEntity; ResponseEntity responseEntity;
if (e != null && e instanceof ToErrorResponseEntity) { if (e != null && e instanceof ToErrorResponseEntity) {
responseEntity = ((ToErrorResponseEntity) e).toErrorResponseEntity(); responseEntity = ((ToErrorResponseEntity) e).toErrorResponseEntity();
} else if (e != null && e instanceof IllegalArgumentException) {
responseEntity = new ResponseEntity<>(e.getMessage(), HttpStatus.BAD_REQUEST);
} else { } else {
responseEntity = new ResponseEntity<>(defaultErrorStatus); responseEntity = new ResponseEntity<>(defaultErrorStatus);
} }