asp.net mvc web api partial update with OData Patch

后端 未结 2 1465
清歌不尽
清歌不尽 2021-02-06 14:03

I am using HttpPatch to partially update an object. To get that working I am using Delta and Patch method from OData (mentioned here: What's the currently recommended way of

2条回答
  •  梦如初夏
    2021-02-06 14:35

    Short answer, No there is no config option to undo the case sensitiveness (as far as i know)

    Long answer: I had the same problem as you today, and this is how i worked around it.
    I found it incredibly annoying that it had to be case sensitive, thus i decided to do away with the whole oData part, since it is a huge library that we are abusing....

    An example of this implementation can be found at my github github

    I decided to implement my own patch method, since that is the muscle that we are actually lacking. I created the following abstract class:

    public abstract class MyModel
    {
        public void Patch(Object u)
        {
            var props = from p in this.GetType().GetProperties()
                        let attr = p.GetCustomAttribute(typeof(NotPatchableAttribute))
                        where attr == null
                        select p;
            foreach (var prop in props)
            {
                var val = prop.GetValue(this, null);
                if (val != null)
                    prop.SetValue(u, val);
            }
        }
    }
    

    Then i make all my model classes inherit from *MyModel*. note the line where i use *let*, i will excplain that later. So now you can remove the Delta from you controller action, and just make it Entry again, as with the put method. e.g.

    public IHttpActionResult PatchUser(int id, Entry newEntry)
    

    You can still use the patch method the way you used to:

    var entry = dbContext.Entries.SingleOrDefault(p => p.ID == id);
    newEntry.Patch(entry);
    dbContext.SaveChanges();
    

    Now, let's get back to the line

    let attr = p.GetCustomAttribute(typeof(NotPatchableAttribute))
    

    I found it a security risk that just any property would be able to be updated with a patch request. For example, you might now want the an ID to be changeble by the patch. I created a custom attribute to decorate my properties with. the NotPatchable attribute:

    public class NotPatchableAttribute : Attribute {}
    

    You can use it just like any other attribute:

    public class User : MyModel
    {
        [NotPatchable]
        public int ID { get; set; }
        [NotPatchable]
        public bool Deleted { get; set; }
        public string FirstName { get; set; }
    }
    

    This in this call the Deleted and ID properties cannot be changed though the patch method.

    I hope this solve it for you as well. Do not hesitate to leave a comment if you have any questions.

    I added a screenshot of me inspecting the props in a new mvc 5 project. As you can see the Result view is populated with the Title and ShortDescription.

    Example of inspecting the props

提交回复
热议问题