Dmp 5271 add api validation get transcriptions document

build.gradle

@@ -515,6 +515,8 @@ dependencies {
 
   testImplementation group: 'org.jeasy', name: 'easy-random-core', version: '5.0.0'
 
+  testImplementation 'com.atlassian.oai:swagger-request-validator-core:2.46.0'
+
   compileJava.dependsOn = openApiGenerateTaskList
 }
 

src/integrationTest/java/uk/gov/hmcts/darts/authorisation/component/impl/AuthorisationImplTest.java

@@ -29,7 +29,7 @@
 import static uk.gov.hmcts.darts.common.enums.SecurityRoleEnum.JUDICIARY;
 import static uk.gov.hmcts.darts.common.enums.SecurityRoleEnum.REQUESTER;
 import static uk.gov.hmcts.darts.hearings.exception.HearingApiError.HEARING_NOT_FOUND;
-import static uk.gov.hmcts.darts.transcriptions.exception.TranscriptionApiError.TRANSCRIPTION_NOT_FOUND;
+import static uk.gov.hmcts.darts.transcriptions.exception.TranscriptionApiError.BAD_REQUEST_TRANSCRIPTION_ID;
 
 class AuthorisationImplTest extends IntegrationBase {
 
@@ -222,8 +222,8 @@ void authoriseByTranscriptionIdShouldThrowTranscriptionApiErrorTranscriptionNotF
                 -1L, Set.of(JUDICIARY))
         );
 
-        assertEquals(TRANSCRIPTION_NOT_FOUND.getTitle(), exception.getMessage());
-        assertEquals(TRANSCRIPTION_NOT_FOUND, exception.getError());
+        assertEquals(BAD_REQUEST_TRANSCRIPTION_ID.getTitle(), exception.getMessage());
+        assertEquals(BAD_REQUEST_TRANSCRIPTION_ID, exception.getError());
     }
 
     @Test

src/integrationTest/java/uk/gov/hmcts/darts/transcriptions/controller/TranscriptionControllerDownloadTranscriptIntTest.java

@@ -163,7 +163,7 @@ void downloadTranscript_shouldReturn401Error_whenUserNotFound() throws Exception
     }
 
     @Test
-    void downloadTranscriptShouldReturnNotFoundError() throws Exception {
+    void downloadTranscript_ShouldReturnNotFoundError() throws Exception {
         MockHttpServletRequestBuilder requestBuilder = MockMvcRequestBuilders.get(URL_TEMPLATE, transcriptionId)
             .header(
                 "accept",
@@ -185,7 +185,7 @@ void downloadTranscriptShouldReturnNotFoundError() throws Exception {
     }
 
     @Test
-    void downloadTranscriptShouldReturnOkWithMicrosoftWordNew() throws Exception {
+    void downloadTranscript_ShouldReturnOk_WithMicrosoftWordNew() throws Exception {
         final String fileName = "Test Document.docx";
         final String fileType = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
         final int fileSize = 11_937;
@@ -257,7 +257,7 @@ void downloadTranscriptShouldReturnOkWithMicrosoftWordNew() throws Exception {
 
     @Test
     @SuppressWarnings("PMD.CloseResource")
-    void downloadTranscriptShouldReturnOkWithMicrosoftWordOld() throws Exception {
+    void downloadTranscript_ShouldReturnOk_WithMicrosoftWordOld() throws Exception {
         final String fileName = "Test Document.doc";
         final String fileType = "application/msword";
         final int fileSize = 22_528;
@@ -319,4 +319,25 @@ void downloadTranscriptShouldReturnOkWithMicrosoftWordOld() throws Exception {
         verifyNoMoreInteractions(mockAuditApi, mockDataManagementFacade, mockFileBasedDownloadResponseMetaData);
     }
 
+    @Test
+    void downloadTranscript_ShouldReturnError_WhenNegativeTranscriptionIdUsed() throws Exception {
+        MockHttpServletRequestBuilder requestBuilder = MockMvcRequestBuilders.get("/transcriptions/-123/document")
+            .header(
+                "accept",
+                "application/msword",
+                "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
+            );
+        MvcResult mvcResult = mockMvc.perform(requestBuilder)
+            .andExpect(status().isBadRequest())
+            .andReturn();
+
+        String actualResponse = mvcResult.getResponse().getContentAsString();
+
+        String expectedResponse = """
+            {"type":"TRANSCRIPTION_124","title":"Invalid transcription id","status":400}
+            """;
+        JSONAssert.assertEquals(expectedResponse, actualResponse, JSONCompareMode.NON_EXTENSIBLE);
+
+        verifyNoInteractions(mockAuditApi);
+    }
 }

src/integrationTest/java/uk/gov/hmcts/darts/transcriptions/controller/TranscriptionControllerGetTranscriptionTest.java

@@ -287,11 +287,11 @@ void getTranscriptionNotFoundWhenIsCurrentFalse() throws Exception {
     }
 
     @Test
-    void getTranscriptionNotFound() throws Exception {
+    void getTranscription_ShouldReturnBadRequest_WhenNegativeTranscriptionId() throws Exception {
         MockHttpServletRequestBuilder requestBuilder = get(ENDPOINT_URL_TRANSCRIPTION, -999);
-        MvcResult response = mockMvc.perform(requestBuilder).andExpect(status().isNotFound()).andReturn();
+        MvcResult response = mockMvc.perform(requestBuilder).andExpect(status().isBadRequest()).andReturn();
         String actualResponse = response.getResponse().getContentAsString();
-        String expectedResponse = getContentsFromFile("tests/transcriptions/transcription/expectedResponseNotFound.json");
+        String expectedResponse = getContentsFromFile("tests/transcriptions/transcription/expectedResponseBadRequest.json");
         JSONAssert.assertEquals(expectedResponse, actualResponse, JSONCompareMode.NON_EXTENSIBLE);
     }
 

src/integrationTest/java/uk/gov/hmcts/darts/transcriptions/controller/TranscriptionControllerUpdateTranscriptionWithTranscriberIntTest.java

@@ -142,12 +142,12 @@ void updateTranscriptionShouldReturnTranscriptionNotFoundError() throws Exceptio
             .header("Content-Type", "application/json")
             .content(objectMapper.writeValueAsString(updateTranscription));
         MvcResult mvcResult = mockMvc.perform(requestBuilder)
-            .andExpect(status().isNotFound())
+            .andExpect(status().isBadRequest())
             .andReturn();
 
         String actualJson = mvcResult.getResponse().getContentAsString();
         String expectedJson = """
-            {"type":"TRANSCRIPTION_101","title":"The requested transcription cannot be found","status":404}
+            {"type":"TRANSCRIPTION_124","title":"Invalid transcription id","status":400}
             """;
         JSONAssert.assertEquals(expectedJson, actualJson, JSONCompareMode.NON_EXTENSIBLE);
 

src/integrationTest/resources/tests/transcriptions/transcription/expectedResponseBadRequest.json

@@ -0,0 +1 @@
+{"type":"TRANSCRIPTION_124","title":"Invalid transcription id","status":400}

src/main/java/uk/gov/hmcts/darts/authorisation/component/impl/AuthorisationImpl.java

@@ -4,6 +4,7 @@
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.collections4.CollectionUtils;
+import org.apache.coyote.BadRequestException;
 import org.springframework.stereotype.Component;
 import uk.gov.hmcts.darts.audio.entity.MediaRequestEntity;
 import uk.gov.hmcts.darts.authorisation.api.AuthorisationApi;
@@ -22,6 +23,8 @@
 import uk.gov.hmcts.darts.common.repository.MediaRequestRepository;
 import uk.gov.hmcts.darts.common.repository.TranscriptionRepository;
 import uk.gov.hmcts.darts.common.repository.TransformedMediaRepository;
+import uk.gov.hmcts.darts.util.DataUtil;
+import uk.gov.hmcts.darts.util.ValidationConstants;
 
 import java.util.Collections;
 import java.util.List;
@@ -36,6 +39,7 @@
 import static uk.gov.hmcts.darts.audio.exception.AudioRequestsApiError.TRANSFORMED_MEDIA_NOT_FOUND;
 import static uk.gov.hmcts.darts.cases.exception.CaseApiError.CASE_NOT_FOUND;
 import static uk.gov.hmcts.darts.hearings.exception.HearingApiError.HEARING_NOT_FOUND;
+import static uk.gov.hmcts.darts.transcriptions.exception.TranscriptionApiError.BAD_REQUEST_TRANSCRIPTION_ID;
 import static uk.gov.hmcts.darts.transcriptions.exception.TranscriptionApiError.TRANSCRIPTION_NOT_FOUND;
 
 @Component
@@ -115,6 +119,9 @@ public void authoriseByMediaId(Long mediaId, Set<SecurityRoleEnum> securityRoles
     @SuppressWarnings({"PMD.ExceptionAsFlowControl"})
     public void authoriseByTranscriptionId(Long transcriptionId, Set<SecurityRoleEnum> securityRoles) {
         try {
+            if (!DataUtil.isWithinBounds(transcriptionId, 1L, ValidationConstants.MaxValues.MAX_LONG_VALUE)) {
+                throw new BadRequestException();
+            }
             final List<CourthouseEntity> courthouses = getCourthousesFromTranscription(transcriptionId);
             if (CollectionUtils.isEmpty(courthouses)) {
                 throw new EntityNotFoundException();
@@ -123,6 +130,9 @@ public void authoriseByTranscriptionId(Long transcriptionId, Set<SecurityRoleEnu
         } catch (EntityNotFoundException ex) {
             log.error("Unable to find Transcription-Courtroom-Courthouse for checkAuthorisation. TranscriptionId={}", transcriptionId, ex);
             throw new DartsApiException(TRANSCRIPTION_NOT_FOUND, ex);
+        } catch (BadRequestException ex) {
+            log.error("TranscriptionId is out of accepted range. TranscriptionId={}", transcriptionId, ex);
+            throw new DartsApiException(BAD_REQUEST_TRANSCRIPTION_ID, ex);
         }
     }
 

src/main/java/uk/gov/hmcts/darts/transcriptions/exception/TranscriptionApiError.java

@@ -133,7 +133,12 @@ public enum TranscriptionApiError implements DartsApiError {
     TOO_MANY_RESULTS(
         TranscriptionsErrorCode.TOO_MANY_RESULTS.getValue(),
         HttpStatus.UNPROCESSABLE_ENTITY,
-        TranscriptionsTitleErrors.TOO_MANY_RESULTS.getValue());
+        TranscriptionsTitleErrors.TOO_MANY_RESULTS.getValue()
+    ),
+    BAD_REQUEST_TRANSCRIPTION_ID(
+        TranscriptionsErrorCode.BAD_REQUEST_TRANSCRIPTION_ID.getValue(),
+        HttpStatus.BAD_REQUEST,
+        TranscriptionsTitleErrors.BAD_REQUEST_TRANSCRIPTION_ID.getValue());
 
 
     private static final String ERROR_TYPE_PREFIX = "TRANSCRIPTION";

src/main/java/uk/gov/hmcts/darts/util/DataUtil.java

@@ -125,4 +125,15 @@ public static boolean toBoolean(Boolean value) {
     public static boolean toBoolean(Boolean value, boolean defaultValue) {
         return Optional.ofNullable(value).orElse(defaultValue);
     }
+
+    public static boolean isWithinBounds(Long value, Long min, Long max) {
+        if (value == null) {
+            return false;
+        }
+        if (min != null && value < min) {
+            return false;
+        }
+        return max == null || value <= max;
+    }
+
 }

src/main/java/uk/gov/hmcts/darts/util/ValidationConstants.java

@@ -0,0 +1,12 @@
+package uk.gov.hmcts.darts.util;
+
+import lombok.experimental.UtilityClass;
+
+@UtilityClass
+@SuppressWarnings({"HideUtilityClassConstructor", "java:S1118", "PMD.MissingStaticMethodInNonInstantiatableClass"})
+public class ValidationConstants {
+
+    public static class  MaxValues {
+        public static final Long MAX_LONG_VALUE = 9_223_372_036_854_775_807L;
+    }
+}

src/main/resources/openapi/annotations.yaml

@@ -32,7 +32,7 @@ paths:
                 annotation:
                   $ref: '#/components/schemas/annotation'
       responses:
-        201:
+        '201':
           description: CREATED
           content:
             application/json:
@@ -43,7 +43,7 @@ paths:
           content:
             application/json+problem:
               schema:
-                $ref: './problem.yaml' 
+                $ref: './problem.yaml'
         '400':
           description: Bad Request Error
           content:
@@ -78,7 +78,7 @@ paths:
           content:
             application/json+problem:
               schema:
-                $ref: './problem.yaml' 
+                $ref: './problem.yaml'
         '400':
           description: Bad Request Error
           content:
@@ -132,7 +132,7 @@ paths:
           content:
             application/json+problem:
               schema:
-                $ref: './problem.yaml' 
+                $ref: './problem.yaml'
         '400':
           description: Bad Request Error
           content:

src/main/resources/openapi/audio.yaml

@@ -106,7 +106,7 @@ paths:
             type: string
           description: "Range header, required for streaming audio."
       responses:
-        200:
+        '200':
           description: OK
           content:
             audio/mpeg:
@@ -149,7 +149,7 @@ paths:
                 type: "AUDIO_102"
                 title: "The requested media cannot be found"
                 status: 404
-        500:
+        '500':
           description: The requested data cannot be located
           content:
             application/json+problem:
@@ -172,15 +172,15 @@ paths:
             schema:
               $ref: '#/components/schemas/AddAudioMetadataRequestWithStorageGUID'
       responses:
-        200:
+        '200':
           description: Audio metadata accepted
-        400:
+        '400':
           description: Bad request
           content:
             application/json+problem:
               schema:
                 $ref: './problem.yaml'
-        500:
+        '500':
           description: Internal server error
           content:
             application/json+problem:
@@ -201,7 +201,7 @@ paths:
             type: integer
           required: true
       responses:
-        200:
+        '200':
           description: OK
           content:
             application/json: