graphql-php/tests/Executor
Derek Lavigne d22385cc93 Update query variable coercion to meet the rules outlined in the
specification.

The framework currently coerces query variables similar to the way it
treats output values, which means it attempts to coerce the value into
the field's corresponding data type regardless of the received value.
According to items 3f and 3g in section 6.1.2
(http://facebook.github.io/graphql/#sec-Validating-Requests) of
Facebook's GraphQL specification query variables should be coerced
according to their type's input coercion rules laid out in section
3.1.1 (http://facebook.github.io/graphql/#sec-Scalars). If the value
can not be coerced into the correct type according the the input
coercion rules for the type a query error should be thrown. This
ensures that client provided query variables were of the correct format
and will be a valid format and type by the time they are passed into an
implementing resolver.

This patch fixes the above issue by updating the way query variables
are sanitized during the process of parsing the query. It directly
follows the rules for scalar input coercion laid out by the
specification and throws query errors when a value that cannot be
coerced to the correct type is given. Tests for isValidPHPValue will
also be updated to ensure that it is doing the correct type checks on
Values::isValidPHPValue for the given type and value provided. A new
test case will also be added to test Values::getVariableValues and make
sure it is also enforcing the scalar input coercion rules and throwing
errors for invalid values.
2017-09-18 12:14:09 -04:00
..
Promise Support PHP7 error exceptions everywhere 2017-06-25 07:33:28 -07:00
AbstractPromiseTest.php Improved docblock comments (suitable for reference docs generation) 2017-08-19 23:01:46 +07:00
AbstractTest.php Added link to docs for generic error about unique type instance (#149) 2017-08-20 22:28:17 +07:00
DeferredFieldsTest.php Moved GraphQL\Utils to GraphQL\Utils\Utils 2017-07-10 19:53:46 +07:00
DirectivesTest.php Several executor tests 2016-10-18 20:30:15 +07:00
ExecutionResultTest.php Spec compliance improvement: data key should not exist in response when it is null / missing (#56) 2016-10-18 22:25:39 +07:00
ExecutorLazySchemaTest.php Added link to docs for generic error about unique type instance (#149) 2017-08-20 22:28:17 +07:00
ExecutorSchemaTest.php Deprecated GraphQL\Type\Definition\Config (#148) 2017-08-14 00:09:02 +07:00
ExecutorTest.php Update query variable coercion to meet the rules outlined in the 2017-09-18 12:14:09 -04:00
LazyInterfaceTest.php Schema validation + tests (#148) 2017-08-13 23:04:03 +07:00
ListsTest.php Default error formatter now returns "Internal server error" unless error is client-aware and safe to report directly to end-users 2017-07-18 20:57:30 +07:00
MutationsTest.php Default error formatter now returns "Internal server error" unless error is client-aware and safe to report directly to end-users 2017-07-18 20:57:30 +07:00
NonNullTest.php Default error formatter now returns "Internal server error" unless error is client-aware and safe to report directly to end-users 2017-07-18 20:57:30 +07:00
ResolveTest.php Reverted #116 (now Executor::defaultFieldResolver checks for instanceof Closure vs is_callable again) 2017-07-08 15:22:17 +07:00
TestClasses.php Replaced "AST" with "Node" in variable names for better readability 2016-11-19 06:47:55 +07:00
UnionInterfaceTest.php Improved docblock comments (suitable for reference docs generation) 2017-08-19 23:01:46 +07:00
ValuesTest.php Update query variable coercion to meet the rules outlined in the 2017-09-18 12:14:09 -04:00
VariablesTest.php Default error reporting now includes "category" key for every error 2017-08-08 02:02:07 +07:00