1. GET http://api.channel-pub-api.localhost/qq/v1/qq-cw-apps/edit/148d4df6eba311e899f654ee75d2ebc1?group_id=spider . The response is as follows. For security reasons, the Client Secret is reset to an empty string.
{
"code": 10000,
"message": "编辑企鹅号的内容网站应用成功",
"data": {
"channel_app_source_uuid": "148d4df6eba311e899f654ee75d2ebc1",
"penguin_name": "篮球场马达1",
"penguin_login_qq": "3176058386",
"penguin_login_wx": "",
"client_id": "32deed1727f9a23a504d6dda48938de0",
"client_secret": "",
"permission": 2,
"status": 0
}
}
2. Therefore, when making a PUT request to http://api.channel-pub-api.localhost/qq/v1/qq-cw-apps/148d4df6eba311e899f654ee75d2ebc1?group_id=spider , if the value of client_secret is not updated, its value is an empty string.
Body
{
"penguin_name": "篮球场马达1",
"penguin_login_qq": "3176058386",
"penguin_login_wx": "",
"client_id": "32deed1727f9a23a504d6dda48938de0",
"client_secret": "",
"permission": 2,
"status": 0
}
3. The request response fails with a 422 status code, as shown in Figure 1.
{
"code": 20004,
"message": "数据验证失败：Client Secret不能为空。"
}
4. Now I need to implement logic so that when the value of client_secret is an empty string, validation is not performed on client_secret and its value is not updated. I edit the validation rules.
/**
* @inheritdoc
*/
public function rules()
{
$rules = [
/* 更新企鹅号的内容网站应用 */
[['client_secret'], 'validateClientSecret', 'skipOnEmpty' => false, 'on' => self::SCENARIO_UPDATE],
[['permission'], 'in', 'range' => [self::PERMISSION_SYNC, self::PERMISSION_PUB, self::PERMISSION_SYNC_PUB], 'on' => self::SCENARIO_UPDATE],
[['status'], 'in', 'range' => [self::STATUS_DISABLED, self::STATUS_ENABLED], 'on' => self::SCENARIO_UPDATE],
];
$parentRules = parent::rules();
return ArrayHelper::merge($rules, $parentRules);
}
/**
* Validates the Client Secret.
* This method serves as the inline validation for Client Secret.
*
* @param string $attribute the attribute currently being validated
* @param array $params the additional name-value pairs given in the rule
*/
public function validateClientSecret($attribute, $params)
{
// 当 Client Secret 为空时，赋值 Client Secret 为原先的值
if (empty($this->$attribute)) {
$this->$attribute = $this->getOldAttribute($attribute);
}
}
5. When making a PUT request to http://api.channel-pub-api.localhost/qq/v1/qq-cw-apps/148d4df6eba311e899f654ee75d2ebc1?group_id=spider , the response succeeds, as shown in Figure 2.
6. Checking the SQL statement, it meets expectations: when the value of client_secret is an empty string, the value of client_secret is not updated.
UPDATE `cpa_qq_cw_app` SET `permission`=1, `updated_at`=1542610618 WHERE `id`=6