APIDevTools / json-schema-ref-parser

Parse, Resolve, and Dereference JSON Schema $ref pointers in Node and browsers
https://apitools.dev/json-schema-ref-parser
MIT License
942 stars 226 forks source link

References to existing but null values fail as missing #310

Closed pimterry closed 5 months ago

pimterry commented 1 year ago

When resolving a reference, if any value en route including the final value is null then resolution fails. This happens here: https://github.com/APIDevTools/json-schema-ref-parser/blob/a5b3946fbb62683ab69e3747a8893014591726af/lib/pointer.ts#L96

I think (not a JSON schema expert) this is incorrect. At the very least, it breaks parsing of some specs from https://github.com/APIs-guru/openapi-directory, including:

Why do these specs include reference to internal null fields? No idea, but as far as I'm aware it's valid to do so, and it's inconvenient that these specs are unparseable due to this issue.

This could be fixed by changing the check to not fail on null when dereferencing the last token in a path (before the last token, it should still be an error). I think undefined should still throw as it does now, because it's not a valid value in JSON, and so should never appear explicitly in a JSON schema (again, not an expert) unlike null.

I'm not totally sure if that change would have any other consequences though. This check was introduced by https://github.com/APIDevTools/json-schema-ref-parser/pull/153/, and my best guess is that it was intended to handle the en-route (non-final) failure case, detecting it and creating an explicit error type for that as part of the error improvements there, but I can't be 100% sure there isn't another effect.

Happy to open a quick PR to make the change, if we can assume that's true and change this accordingly.

jonluca commented 5 months ago

Good call out and sorry for the delay here - this should be working like you said in v11.2.3

pimterry commented 5 months ago

Awesome, thanks @jonluca!

If you're working on this - any chance of updating https://github.com/APIDevTools/swagger-parser/ to use the latest version of this package?

It looks like that's currently pinned to 9.0.6, "to avoid circle bug" according to https://github.com/APIDevTools/swagger-parser/commit/ef57642fb22b192ac309ff4df15fe7cb533f3cc5 (from @philsturgeon), I'm not sure exactly what that means but maybe it's resolved in later releases since then? It'd be great to see this updated to propagate the latest fixes here through that package too.