Unhandled exception when you call an HTTP POST action with GET about aspnet-api-versioning HOT 4 CLOSED

This looks like a possible false positive. In the new POST action, it is returning the location header that is generated by using the route template with the key notAGet and the values new { id = 43 }. Since the route template defined by [HttpPost("notAGet")] does not have an {id} template parameter, I would expect some type of failure.

To test the theory, I added and modified your example as:

[HttpPost("notAGet")]
public IActionResult NotAGet() => CreatedAtRoute("GetMessageById", new { id = 43 }, null );

The request looks like:

POST /api/v1/helloworld/notAGet HTTP/1.1
Host: localhost

The operation succeeds with the response:

HTTP/1.1 201 Created
api-supported-versions: 1.0
Location: http://localhost/api/v1/HelloWorld/43

In addition, the 500 response that I received clearly indicated that one or more of the route values were not present in the template. Maybe that information is only disclosed during debugging. Let me know if this is not the behavior you are expecting.

from aspnet-api-versioning.

@commonsensesoftware - sorry, my example is probably a bit confusing, so I'll strip it down to the simplest case. Take this controller

[ApiVersion("1.0")]
[Route("api/v{version:apiVersion}/[controller]")]
public class HelloWorldController : Controller
{
[HttpPost("notAGet")]
public IActionResult NotAGet() => Ok();
}

if you issue a GET request as follows:
GET /api/v1/helloworld/notAGet HTTP/1.1
Host: localhost

You get an unhandled ArgumentNullException from the ApiVersioning middleware. It throws at line 26 of Microsoft.AspNetCore.Mvc.Versioning.ActionSelectionContext.cs. This will end up being an Http 500 response.

I think you should get an Http 404 in this instance because there is no matching route for the GET request. At least that is what happens if you do the same thing to a controller in a project without any Api versioning e.g.

[Route("api/[controller]")]
public class HelloWorldController : Controller
{
  [HttpPost("notAGet")]
  public IActionResult NotAGet() => Ok();

}

GET /api/helloworld/notAGet HTTP/1.1
Host: localhost

Gives a 404...

Hope that makes sense...

from aspnet-api-versioning.

I see. Yes, this is a bug. The original implementation of the ActionSelector class returns null when no actions are satisfied and I didn't account for that. I've tracked down the issue and will have a published fix in soon. Thanks for reporting this.

from aspnet-api-versioning.

No problem. Thanks for fixing!

from aspnet-api-versioning.