Enable trimming for OpenAPI package (#55465)

Co-authored-by: Eric Erhardt <[email protected]>

Author: captainsafia

eng/TrimmableProjects.props

@@ -107,5 +107,6 @@
     <TrimmableProject Include="Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions" />
     <TrimmableProject Include="Microsoft.Extensions.Diagnostics.HealthChecks" />
     <TrimmableProject Include="Microsoft.Extensions.Features" />
+    <TrimmableProject Include="Microsoft.AspNetCore.OpenApi" />
   </ItemGroup>
 </Project>

src/Http/Http.Extensions/gen/StaticRouteHandlerModel/EndpointParameter.cs

@@ -107,6 +107,16 @@ private void ProcessEndpointParameterSource(Endpoint endpoint, ISymbol symbol, I
             {
                 AssigningCode = "httpContext.Request.Form";
             }
+            // Complex form binding is only supported in RDF because it uses shared source with Blazor that requires dynamic analysis
+            // and codegen. Emit a diagnostic when these are encountered to avoid producing buggy code.
+            else if (!(SymbolEqualityComparer.Default.Equals(Type, wellKnownTypes.Get(WellKnownType.Microsoft_Extensions_Primitives_StringValues))
+                    || Type.SpecialType == SpecialType.System_String
+                    || TryGetParsability(Type, wellKnownTypes, out var _)
+                    || (IsArray && TryGetParsability(ElementType, wellKnownTypes, out var _))))
+            {
+                var location = endpoint.Operation.Syntax.GetLocation();
+                endpoint.Diagnostics.Add(Diagnostic.Create(DiagnosticDescriptors.UnableToResolveParameterDescriptor, location, symbol.Name));
+            }
             else
             {
                 AssigningCode = !IsArray

src/Http/Http.Extensions/test/RequestDelegateGenerator/CompileTimeCreationTests.cs

@@ -737,4 +737,24 @@ public class ConcreteService : IGenericService<SomeInput, string?>
         var diagnostics = updatedCompilation.GetDiagnostics();
         Assert.Empty(diagnostics.Where(d => d.Severity >= DiagnosticSeverity.Warning));
     }
+
+    [Fact]
+    public async Task RequestDelegateGenerator_SkipsComplexFormParameter()
+    {
+        var source = """
+app.MapPost("/", ([FromForm] Todo todo) => { });
+app.MapPost("/", ([FromForm] Todo todo, IFormFile formFile) => { });
+app.MapPost("/", ([FromForm] Todo todo, [FromForm] int[] ids) => { });
+""";
+        var (generatorRunResult, _) = await RunGeneratorAsync(source);
+
+        // Emits diagnostics but no generated sources
+        var result = Assert.IsType<GeneratorRunResult>(generatorRunResult);
+        Assert.Empty(result.GeneratedSources);
+        Assert.All(result.Diagnostics, diagnostic =>
+        {
+            Assert.Equal(DiagnosticDescriptors.UnableToResolveParameterDescriptor.Id, diagnostic.Id);
+            Assert.Equal(DiagnosticSeverity.Warning, diagnostic.Severity);
+        });
+    }
 }

src/OpenApi/sample/Controllers/TestController.cs

@@ -1,4 +1,5 @@
 using System.ComponentModel.DataAnnotations;
+using System.Diagnostics.CodeAnalysis;
 using Microsoft.AspNetCore.Mvc;
 
 [ApiController]
@@ -26,6 +27,7 @@ public class RouteParamsContainer
 
         [FromRoute]
         [MinLength(5)]
+        [UnconditionalSuppressMessage("Trimming", "IL2026:RequiresUnreferencedCode", Justification = "MinLengthAttribute works without reflection on string properties.")]
         public string? Name { get; set; }
     }
 

src/OpenApi/sample/Program.cs

@@ -7,7 +7,9 @@
 
 var builder = WebApplication.CreateBuilder(args);
 
+#pragma warning disable IL2026 // MVC isn't trim-friendly yet
 builder.Services.AddControllers();
+#pragma warning restore IL2026
 builder.Services.AddAuthentication().AddJwtBearer();
 
 builder.Services.AddOpenApi("v1", options =>
@@ -44,8 +46,15 @@
 forms.MapPost("/form-file", (IFormFile resume) => Results.Ok(resume.FileName));
 forms.MapPost("/form-files", (IFormFileCollection files) => Results.Ok(files.Count));
 forms.MapPost("/form-file-multiple", (IFormFile resume, IFormFileCollection files) => Results.Ok(files.Count + resume.FileName));
+// Disable warnings because RDG does not support complex form binding yet.
+#pragma warning disable IL2026 // Members annotated with 'RequiresUnreferencedCodeAttribute' require dynamic access otherwise can break functionality when trimming application code
+#pragma warning disable IL3050 // Calling members annotated with 'RequiresDynamicCodeAttribute' may break functionality when AOT compiling.
+#pragma warning disable RDG003 // Unable to resolve parameter
 forms.MapPost("/form-todo", ([FromForm] Todo todo) => Results.Ok(todo));
 forms.MapPost("/forms-pocos-and-files", ([FromForm] Todo todo, IFormFile file) => Results.Ok(new { Todo = todo, File = file.FileName }));
+#pragma warning restore RDG003 // Unable to resolve parameter
+#pragma warning restore IL3050 // Calling members annotated with 'RequiresDynamicCodeAttribute' may break functionality when AOT compiling.
+#pragma warning restore IL2026 // Members annotated with 'RequiresUnreferencedCodeAttribute' require dynamic access otherwise can break functionality when trimming application code
 
 var v1 = app.MapGroup("v1")
     .WithGroupName("v1");

src/OpenApi/sample/Sample.csproj

@@ -4,6 +4,9 @@
     <TargetFramework>$(DefaultNetCoreTargetFramework)</TargetFramework>
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
+    <!-- Required to generated trimmable Map-invocations. -->
+    <EnableRequestDelegateGenerator>true</EnableRequestDelegateGenerator>
+    <IsAotCompatible>true</IsAotCompatible>
   </PropertyGroup>
 
   <ItemGroup>
@@ -22,4 +25,9 @@
     <Compile Include="../test/SharedTypes.cs" />
   </ItemGroup>
 
+  <!-- Required to generated trimmable Map-invocations. -->
+  <ItemGroup>
+    <ProjectReference Include="$(RepoRoot)/src/Http/Http.Extensions/gen/Microsoft.AspNetCore.Http.RequestDelegateGenerator.csproj" OutputItemType="Analyzer" ReferenceOutputAssembly="false" />
+  </ItemGroup>
+
 </Project>

src/OpenApi/src/Extensions/JsonObjectSchemaExtensions.cs

@@ -4,7 +4,6 @@
 using System.ComponentModel.DataAnnotations;
 using System.Globalization;
 using System.Linq;
-using System.Reflection;
 using System.Text.Json.Nodes;
 using JsonSchemaMapper;
 using Microsoft.AspNetCore.Mvc.ApiExplorer;
@@ -248,14 +247,10 @@ internal static void ApplyParameterInfo(this JsonObject schema, ApiParameterDesc
         // based on our model binding heuristics. In that case, to access the validation attributes that the
         // model binder will respect we will need to get the property from the container type and map the
         // attributes on it to the schema.
-        if (parameterDescription.ModelMetadata.PropertyName is { } propertyName)
+        if (parameterDescription.ModelMetadata is { PropertyName: { }, ContainerType: { }, HasValidators: true, ValidatorMetadata: { } validations })
         {
-            var property = parameterDescription.ModelMetadata.ContainerType?.GetProperty(propertyName, BindingFlags.Public | BindingFlags.Instance);
-            if (property is not null)
-            {
-                var attributes = property.GetCustomAttributes(true).OfType<ValidationAttribute>();
-                schema.ApplyValidationAttributes(attributes);
-            }
+            var attributes = validations.OfType<ValidationAttribute>();
+            schema.ApplyValidationAttributes(attributes);
         }
         // Route constraints are only defined on parameters that are sourced from the path. Since
         // they are encoded in the route template, and not in the type information based to the underlying

src/OpenApi/src/Extensions/OpenApiEndpointConventionBuilderExtensions.cs

@@ -1,6 +1,7 @@
 // Licensed to the .NET Foundation under one or more agreements.
 // The .NET Foundation licenses this file to you under the MIT license.
 
+using System.Diagnostics.CodeAnalysis;
 using System.Linq;
 using System.Reflection;
 using Microsoft.AspNetCore.Http;
@@ -17,12 +18,16 @@ namespace Microsoft.AspNetCore.Builder;
 /// </summary>
 public static class OpenApiEndpointConventionBuilderExtensions
 {
+    private const string TrimWarningMessage = "Calls Microsoft.AspNetCore.OpenApi.OpenApiGenerator.GetOpenApiOperation(MethodInfo, EndpointMetadataCollection, RoutePattern) which uses dynamic analysis. Use IServiceCollection.AddOpenApi() to generate OpenAPI metadata at startup for all endpoints,";
+
     /// <summary>
     /// Adds an OpenAPI annotation to <see cref="Endpoint.Metadata" /> associated
     /// with the current endpoint.
     /// </summary>
     /// <param name="builder">The <see cref="IEndpointConventionBuilder"/>.</param>
     /// <returns>A <see cref="IEndpointConventionBuilder"/> that can be used to further customize the endpoint.</returns>
+    [RequiresDynamicCode(TrimWarningMessage)]
+    [RequiresUnreferencedCode(TrimWarningMessage)]
     public static TBuilder WithOpenApi<TBuilder>(this TBuilder builder) where TBuilder : IEndpointConventionBuilder
     {
         builder.Finally(builder => AddAndConfigureOperationForEndpoint(builder));
@@ -36,13 +41,17 @@ public static TBuilder WithOpenApi<TBuilder>(this TBuilder builder) where TBuild
     /// <param name="builder">The <see cref="IEndpointConventionBuilder"/>.</param>
     /// <param name="configureOperation">An <see cref="Func{T, TResult}"/> that returns a new OpenAPI annotation given a generated operation.</param>
     /// <returns>A <see cref="IEndpointConventionBuilder"/> that can be used to further customize the endpoint.</returns>
+    [RequiresDynamicCode(TrimWarningMessage)]
+    [RequiresUnreferencedCode(TrimWarningMessage)]
     public static TBuilder WithOpenApi<TBuilder>(this TBuilder builder, Func<OpenApiOperation, OpenApiOperation> configureOperation)
         where TBuilder : IEndpointConventionBuilder
     {
         builder.Finally(endpointBuilder => AddAndConfigureOperationForEndpoint(endpointBuilder, configureOperation));
         return builder;
     }
 
+    [RequiresDynamicCode(TrimWarningMessage)]
+    [RequiresUnreferencedCode(TrimWarningMessage)]
     private static void AddAndConfigureOperationForEndpoint(EndpointBuilder endpointBuilder, Func<OpenApiOperation, OpenApiOperation>? configure = null)
     {
         foreach (var item in endpointBuilder.Metadata)

src/OpenApi/src/Extensions/OpenApiServiceCollectionExtensions.cs

@@ -1,8 +1,11 @@
 // Licensed to the .NET Foundation under one or more agreements.
 // The .NET Foundation licenses this file to you under the MIT license.
 
+using Microsoft.AspNetCore.Http.Json;
 using Microsoft.AspNetCore.OpenApi;
 using Microsoft.Extensions.ApiDescriptions;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+using Microsoft.Extensions.Options;
 
 namespace Microsoft.Extensions.DependencyInjection;
 
@@ -67,6 +70,8 @@ private static IServiceCollection AddOpenApiCore(this IServiceCollection service
         services.AddSingleton<IDocumentProvider, OpenApiDocumentProvider>();
         // Required to resolve document names for build-time generation
         services.AddSingleton(new NamedService<OpenApiDocumentService>(documentName));
+        // Required to support JSON serializations
+        services.TryAddEnumerable(ServiceDescriptor.Singleton<IConfigureOptions<JsonOptions>, OpenApiSchemaJsonOptions>());
         return services;
     }
 }

src/OpenApi/src/Microsoft.AspNetCore.OpenApi.csproj

@@ -7,6 +7,10 @@
     <!-- Needed to support compiling Utf8BufferTextWriter implementation shared with SignalR -->
     <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
     <Description>Provides APIs for annotating route handler endpoints in ASP.NET Core with OpenAPI annotations.</Description>
+    <IsAotCompatible>true</IsAotCompatible>
+    <!-- Required to generated native AoT friendly `MapOpenApi` endpoint. -->
+    <EnableRequestDelegateGenerator>true</EnableRequestDelegateGenerator>
+    <InterceptorsPreviewNamespaces>$(InterceptorsPreviewNamespaces);Microsoft.AspNetCore.Http.Generated</InterceptorsPreviewNamespaces>
   </PropertyGroup>
 
   <ItemGroup>
@@ -36,4 +40,9 @@
     <Compile Include="$(RepoRoot)/src/SignalR/common/Shared/MemoryBufferWriter.cs" LinkBase="Shared" />
   </ItemGroup>
 
+  <!-- Required to generated native AoT friendly `MapOpenApi` endpoint. -->
+  <ItemGroup>
+    <ProjectReference Include="$(RepoRoot)/src/Http/Http.Extensions/gen/Microsoft.AspNetCore.Http.RequestDelegateGenerator.csproj" OutputItemType="Analyzer" ReferenceOutputAssembly="false" />
+  </ItemGroup>
+
 </Project>