-
Notifications
You must be signed in to change notification settings - Fork 76
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow handlers to return user-defined error types #1180
Conversation
Enforce that `HttpResponseError`s status codes are 4xx or 5xx using an `ErrorStatusCode` type which may only be those statuses. See: #39 (comment) While we're making breaking API changes, let's also have `HttpError::for_status` take a validated client-error-only type, rather than panicking surprisingly. This way, it's obvious to the user that the argument to this has to be a 4xx. Fixes #693
it occurs to me that |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks for doing this
@@ -943,9 +946,9 @@ async fn http_request_handle<C: ServerContext>( | |||
), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should we be firing a USDT probe here?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We weren't previously, but yeah, we probably should. I can add it in this PR if that makes sense?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Probably doesn't... (unless you've done it already). We can file an issue
Co-authored-by: Adam Leventhal <[email protected]>
Co-authored-by: David Pacheco <[email protected]>
+ | ||
For details on how to implement `HttpResponseError` for user-defined types, see | ||
the trait documentation, or | ||
https://github.com/oxidecomputer/dropshot/blob/main/dropshot/examples/custom-error.rs[`examples/custom-error.rs`]. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this link will be broken until this PR has merged --- it still felt like the nicest way to reference the example in the changelog, IMO.
Okay, @davepacheco, I've updated Omicron to use this branch in oxidecomputer/omicron#7196, and uncovered an issue with the generated OpenAPI docs, which I've resolved (see #1180). I've added changelog entries describing the breaking changes and the migration instructions; let me know what you think of https://github.com/oxidecomputer/dropshot/blob/75cbc09542cf439412c4c13ee2b799f1dff1f28a/CHANGELOG.adoc#unreleased-changes-release-date-tbd |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the fixups and comments. The CHANGELOG notes look terrific! (I haven't re-reviewed all the diffs here.)
Currently, all endpoint handler functions must return a
Result<T, HttpError>
, whereT
implementsHttpResponse
. This isunfortunate, as it limits how error return values are represented in
the API. There isn't presently a mechanism for an endpoint to return
a structured error value of its own which is part of the OpenAPI spec
for that endpoint. This is discussed at length in issue #39.
This branch relaxes this requirement, and instead allows endpoint
handler functions to return
Result<T, E>
, whereE
is any type thatimplements a new
HttpResponseError
trait.The
HttpResponseError
trait defines how to produce an error responsefor an error value. This is implemented by
dropshot
'sHttpError
type, but it may also be implemented by user errors. Types implementing
this trait must implement
HttpResponseContent
, to determine how togenerate the response body and define its schema, and they must also
implement a method
HttpResponseError::status_code
to provide thestatus code to use for the error response. This is somewhat different
from the existing
HttpCodedResponse
trait, which allows successfulresponses to indicate at compile time that they will always have a
particular status code, such as 201 Created. Errors are a bit different:
we would like to be able to return any number of different error status
codes, but would still like to ensure that they represent errors, in
order to correctly generate an OpenAPI document where the error schemas
are returned only for error responses (see this comment for
details). As discussed here, we ensure this by providing new
ErrorStatusCode
andClientErrorStatusCode
types, which are newtypesaround
http::StatusCode
that only contain a 4xx or 5xx status (in thecase of
ErrorStatusCode
), or only contain a 4xx (in the case ofClientErrorStatusCode
). These types may be fallibly converted from anhttp::StatusCode
at runtime, but we also provide constants forwell-known 4xx and 5xx statuses, which can be used infallibly. The
HttpResponseError::status_code
method returns anErrorStatusCode
rather than a
http::StatusCode
, allowing us to ensure that error typesalways have error statuses and generate a correct OpenAPI document.
Additionally, while adding
ErrorStatusCode
s, I've gone ahead andchanged the
dropshot::HttpError
type to also use it, and changed theHttpError::for_client_error
andHttpError::for_status
constructorsto take a
ClientErrorStatusCode
. Although this is a breaking change,it resolves a long-standing issue with these APIs: currently, they
assert that the provided status code is a 4xx internally, which is often
surprising to the user. Thus, this PR fixes #693.
Fixes #39
Fixes #693
Fixes #801
This branch is a second attempt at the change originally proposed in PR
#1164, so this closes #1164. This design is substantially simpler, and
only addresses the ability for handler functions to return
user-defined types. Other changes made in #1164, such as a way to
specify a global handler for dropshot-generated errors, and adding
headers to
HttpError
responses, can be addressed separately. For now,all extractors and internal errors still produce
dropshot::HttpError
s.A subsequent change will implement a mechanism for providing alternate
presentation for such errors (such as an HTML 404 page).