SPSCommerce
diff --git a/‎rulesets/src/.spectral.yml
Copy file name to clipboard
+1Lines changed: 1 addition & 0 deletions b/‎rulesets/src/.spectral.yml
Copy file name to clipboard
+1Lines changed: 1 addition & 0 deletions
diff --git a/‎rulesets/src/collections.ruleset.yml
Copy file name to clipboard
+168Lines changed: 168 additions & 0 deletions b/‎rulesets/src/collections.ruleset.yml
Copy file name to clipboard
+168Lines changed: 168 additions & 0 deletions
diff --git a/‎rulesets/test/collections/sps-collection-missing-results-array.test.js
Copy file name to clipboard
+93Lines changed: 93 additions & 0 deletions b/‎rulesets/test/collections/sps-collection-missing-results-array.test.js
Copy file name to clipboard
+93Lines changed: 93 additions & 0 deletions
diff --git a/‎rulesets/test/collections/sps-disallow-resource-identifier-filtering.test.js
Copy file name to clipboard
+52Lines changed: 52 additions & 0 deletions b/‎rulesets/test/collections/sps-disallow-resource-identifier-filtering.test.js
Copy file name to clipboard
+52Lines changed: 52 additions & 0 deletions
diff --git a/‎rulesets/test/collections/sps-filtering-only-get-requests.test.js
Copy file name to clipboard
+65Lines changed: 65 additions & 0 deletions b/‎rulesets/test/collections/sps-filtering-only-get-requests.test.js
Copy file name to clipboard
+65Lines changed: 65 additions & 0 deletions
@@ -8,6 +8,7 @@ extends:
   - serialization.ruleset.yml
   - url-structure.ruleset.yml 
   - webhooks.ruleset.yml
+  - collections.ruleset.yml
 
 rules:
   #  not keeping this, just off for testing in this repo
 
@@ -0,0 +1,168 @@
+rules:
+  ##### General #####
+  sps-no-collection-paging-capability:
+    description: "Response bodies from collection endpoints SHOULD offer paging capability."
+    severity: warn
+    given: $.paths[?(!@property.match(/.*\/\{[^}]+\}$/))].get.responses['200'].content.application/json.schema.properties
+    then:
+      - field: "paging"
+        function: truthy
+      - field: "paging.type"
+        function: pattern
+        functionOptions:
+          match: "object"
+
+  ##### Root Element #####
+  sps-collection-missing-results-array:
+    description: "Response bodies must have a root element called results and is an array of objects."
+    severity: error
+    given: $.paths[?(!@property.match(/.*\/\{[^}]+\}$/))].get.responses['200'].content.application/json.schema.properties.results
+    then:
+      - field: type
+        function: pattern
+        functionOptions:
+          match: "array"
+      - field: items.type
+        function: pattern
+        functionOptions:
+          match: "object"
+
+  ##### Pagination #####
+  sps-missing-pagination-query-parameters:
+    description: "Collection GET endpoints SHOULD support pagination using query parameters. Offset or cursor based pagination is required."
+    severity: warn
+    given: $.paths[?(!@property.match(/.*\/\{[^}]+\}\/*.*/))].get
+    then:
+      - field: parameters
+        function: schema
+        functionOptions:
+          schema:
+            type: array
+            items:
+              type: object
+            contains:
+              type: object
+              properties:
+                name:
+                  const: limit
+                in:
+                  const: query
+            allOf:
+            - anyOf:
+              - contains:
+                  type: object
+                  properties:
+                    name:
+                      const: offset
+                    in:
+                      const: query
+              - contains:
+                  type: object
+                  properties:
+                    name:
+                      const: cursor
+                    in:
+                      const: query
+
+  sps-post-request-body-missing-paging-object:
+    description: "POST collection endpoints MUST have a request body schema that includes paging parameters."
+    severity: error
+    given: $.paths[?(!@property.match(/.*\/\{[^}]+\}$/))].post.requestBody.content.application/json.schema.properties.paging
+    then:
+      field: "type"
+      function: pattern
+      functionOptions:
+        match: "object"
+
+  ##### FILTERING #####
+  sps-disallow-resource-identifier-filtering:
+    description: "Resource identifier filtering is not allowed as a query parameter. Use the resource identifier in the URL path."
+    severity: warn
+    given: $.paths..get.parameters.[?(@.in=='query' && @.name=='id')]
+    then:
+      field: "name"
+      function: pattern
+      functionOptions:
+        notMatch: "^id$"
+
+  sps-filtering-only-get-requests:
+    description: "Only GET-based endpoints SHOULD have have the query parameter 'filter'."
+    severity: error
+    given: $.paths.*[?(@property!='get')].parameters.[?(@.in=='query' && @.name=='filter')].name
+    then:
+      function: falsy
+
+# Commented out because 
+# https://github.com/SPSCommerce/sps-api-standards/pull/86#discussion_r1680361945
+  # sps-unreasonable-query-parameters-limit:
+  #   description: "Filtering query parameters SHOULD have a reasonable limit, no more than 12."
+  #   severity: warn
+  #   given: $.paths..get
+  #   then:
+  #     function: schema
+  #     functionOptions:
+  #       schema:
+  #         type: object
+  #         properties:
+  #           parameters:
+  #             type: array
+  #             minContains: 0
+  #             maxContains: 12
+  #             contains:
+  #               type: object
+  #               properties:
+  #                 in:
+  #                   const: query
+
+  sps-hybird-filtering-exists-with-root-filter:
+    description: "Hybrid filtering MAY be offered on multiple attributes, but MUST never exist if a root \"filter\" query parameter is present."
+    severity: error
+    given: $.paths..get.parameters^
+    then:
+      function: schema
+      functionOptions:
+        schema:
+          type: object
+          properties:
+            parameters:
+              type: array
+              items:
+                type: object
+                properties:
+                  name:
+                    type: string
+                  in:
+                    type: string
+          allOf:
+          - if:
+              properties:
+                parameters:
+                  type: array
+                  contains:
+                    type: object
+                    properties:
+                      name:
+                        const: filter
+            then:
+              not:
+                properties:
+                  parameters:
+                    type: array
+                    contains:
+                      type: object
+                      properties:
+                        name:
+                          type: string
+                          pattern: \w+Filter
+
+  ##### SORTING #####
+  sps-sorting-parameters-only-get-requests:
+    description: "Non-GET endpoints MUST NOT have sorting query parameters. Parameter names such as sort, sorting, orderBy, etc."
+    severity: error
+    given: $.paths.*[?(@property!='get')].parameters.[?(@.in=='query')]
+    then:
+      field: "name"
+      function: pattern
+      functionOptions:
+        notMatch: "^sort|sorting|sortBy|order|ordering|orderBy$"
+
@@ -0,0 +1,93 @@
+const { SpectralTestHarness } = require("../harness/spectral-test-harness.js");
+
+describe("sps-collection-missing-results-array", () => {
+  let spectral = null;
+  const ruleName = "sps-collection-missing-results-array";
+  const ruleset = "src/collections.ruleset.yml";
+
+  beforeEach(async () => {
+    spectral = new SpectralTestHarness(ruleset);
+  });
+
+  test("valid - collection response with results array of objects", async () => {
+    const spec = `
+      openapi: 3.0.0
+      info:
+        title: Sample API
+        version: 1.0.0
+      paths:
+        /users:
+          get:
+            summary: Get a list of users
+            responses:
+              '200':
+                description: A list of users
+                content:
+                  application/json:
+                    schema:
+                      properties:
+                        results: 
+                          type: array
+                          items:
+                            type: object
+                        paging: 
+                          type: object
+    `;
+
+    await spectral.validateSuccess(spec, ruleName);
+  });
+
+  test("invalid - collection response - results is not an array", async () => {
+    const spec = `
+      openapi: 3.0.0
+      info:
+        title: Sample API
+        version: 1.0.0
+      paths:
+        /users:
+          get:
+            summary: Get a list of users
+            responses:
+              '200':
+                description: A list of users
+                content:
+                  application/json:
+                    schema:
+                      properties:
+                        results: 
+                          type: object
+                        paging: 
+                          type: object
+    `;
+
+    await spectral.validateFailure(spec, ruleName, "Error", 1);
+  });
+
+  test("invalid - collection response - results is not an array of objects", async () => {
+    const spec = `
+      openapi: 3.0.0
+      info:
+        title: Sample API
+        version: 1.0.0
+      paths:
+        /users:
+          get:
+            summary: Get a list of users
+            responses:
+              '200':
+                description: A list of users
+                content:
+                  application/json:
+                    schema:
+                      properties:
+                        results: 
+                          type: array
+                          items:
+                            type: string
+                        paging:
+                          type: object
+    `;
+
+    await spectral.validateFailure(spec, ruleName, "Error", 1);
+  });
+});
@@ -0,0 +1,52 @@
+    const { SpectralTestHarness } = require("../harness/spectral-test-harness.js");
+
+describe("sps-disallow-resource-identifier-filtering", () => {
+  let spectral = null;
+  const ruleName = "sps-disallow-resource-identifier-filtering";
+  const ruleset = "src/collections.ruleset.yml";
+
+  beforeEach(async () => {
+    spectral = new SpectralTestHarness(ruleset);
+  });
+
+  test("valid - resource identifier is within the path of the endpoint", async () => {
+    const spec = `
+      openapi: 3.0.0
+      info:
+        title: Sample API
+        version: 1.0.0
+      paths:
+        /users/{id}:
+          get:
+            summary: Get a list of users
+            parameters:
+            - name: id
+              in: path
+              required: true
+          responses:
+              '200':
+                description: A list of users
+    `;
+
+    await spectral.validateSuccess(spec, ruleName);
+  });
+
+  test("invalid - resource identifier is defined as a query parameter", async () => {
+    const spec = `
+      openapi: 3.0.0
+      info:
+        title: Sample API
+        version: 1.0.0
+      paths:
+        /users:
+          get:
+            summary: Get a list of users
+            parameters:
+            - name: id
+              in: query
+              required: false
+    `;
+
+    await spectral.validateFailure(spec, ruleName, "Warning", 1);
+  });
+});
@@ -0,0 +1,65 @@
+    const { SpectralTestHarness } = require("../harness/spectral-test-harness.js");
+
+describe("sps-filtering-only-get-requests", () => {
+  let spectral = null;
+  const ruleName = "sps-filtering-only-get-requests";
+  const ruleset = "src/collections.ruleset.yml";
+
+  beforeEach(async () => {
+    spectral = new SpectralTestHarness(ruleset);
+  });
+
+  test("valid - GET endpoint has a filter query parameter", async () => {
+    const spec = `
+      openapi: 3.0.0
+      info:
+        title: Sample API
+        version: 1.0.0
+      paths:
+        /users:
+          get:
+            summary: Get a list of users
+            parameters:
+            - name: filter
+              in: query
+              required: false
+          responses:
+              '200':
+                description: A list of users
+        /employees:
+          get:
+            summary: Get a list of users
+            parameters:
+            - name: filter
+              in: query
+              required: false
+            responses:
+              '200':
+                description: A list of users
+    `;
+
+    await spectral.validateSuccess(spec, ruleName);
+  });
+
+  test("invalid - non-GET endpoints has filter query parameter", async () => {
+    const spec = `
+      openapi: 3.0.0
+      info:
+        title: Sample API
+        version: 1.0.0
+      paths:
+        /users:
+          post:
+            summary: Create a user
+            parameters:
+            - name: filter
+              in: query
+              required: false
+            responses:
+              '200':
+                description: Create a user
+    `;
+
+    await spectral.validateFailure(spec, ruleName, "Error", 1);
+  });
+});