LI82794: POLICY VALIDATION IN `CATCH` BLOCK IS BROKEN

APAR status

• Closed as program error.

Error description

• Policy validation in catch blocks is broken because the code
  used to generate the list of policy references is not working
  properly.
  
  
  2022-10-18T20:11:46.616Z
  trace:apim:routes:validatePolicyReferences [ID]
  policyReferences:
  ["operation-switch:2.0.0","gatewayscript:1.0.0","xslt:1.0.0"]
  2022-10-18T20:11:46.616Z
  trace:apim:routes:validatePolicyReferences [ID] policy exact
  match found: "operation-switch:2.0.0"
  2022-10-18T20:11:46.616Z
  trace:apim:routes:validatePolicyReferences [ID] policy exact
  match found: "gatewayscript:1.0.0"
  2022-10-18T20:11:46.616Z
  trace:apim:routes:validatePolicyReferences [ID] policy exact
  match found: "xslt:1.0.0"
  2022-10-18T20:11:46.616Z
  trace:apim:routes:validatePolicyReferences [ID] /\ Exiting:
  validatePolicyReferences::validateReferences:
  "implicit-token-endpoint-test:1.0.0"
  2022-10-18T20:11:46.617Z
  trace:apim:routes:validatePolicyReferences [ID] \/ Entering:
  validatePolicyReferences::getConfigured: "[gw: qa-gw10-int]"
  2022-10-18T20:11:46.683Z
  trace:apim:routes:validatePolicyReferences [ID] /\ Exiting:
  validatePolicyReferences::getConfigured: "[gw: qa-gw10-int]"
  2022-10-18T20:11:46.684Z
  trace:apim:routes:validatePolicyReferences [ID] \/ Entering:
  validatePolicyReferences::validateReferences: "[api:
  implicit-token-endpoint-test:1.0.0, gw: qa-gw10-int]"
  2022-10-18T20:11:46.684Z
  trace:apim:routes:validatePolicyReferences [ID]
  configuredPolicies: [{"name":"validate-grant-sec-endpt-cp-6c8a"
  ,"version":"1.0.0","url":"PAthto policy","state":"public","custo
  ant-cp-15a3","version":"1.0.0","url:"PATH
  
  
  Users can see the if policy in catch block:
     catch:
       - default:
           - if:
               title: if
               condition: 'true'
               execute:
                 - gatewayscript:
                     title: gatewayscript
                     version: 1.0.0
                     source: "var XML = require('xml');....
  apim.output('application/xml');\r\n}\r\n\r\n"
               version: 1.0.0
  

Local fix

Problem summary

• When publishing APIs, the management subsystem validates policy
  references exist on the gateway before publishing, however this
  validation is missing for the catch block of an API in 10.0.1.x
  releases.
  

Problem conclusion

• Updated the validation in 10.0.1.9 to correctly apply validation
  to the catch block of an API in the same way that the execute
  block was being validated.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  API CONNECT ENT

• Fixed component ID

  5725Z2201

Applicable component levels