PH60139: Parsing values for the same key is not policed for z/OS Connect API providers.

APAR status

• Closed as unreproducible in next release.

Error description

• A request with multiple values for the same JSON key uses the
  last specified value for the key/value pair. Duplicate keys are
  not supported by OpenAPI 2 nor OpenAPI 3 specifications.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of z/OS Connect V3.0 API providers *
  *                 (OpenAPI 2 and OpenAPI 3).                   *
  ****************************************************************
  * PROBLEM DESCRIPTION: Parsing values for the same key is not  *
  *                      policed for z/OS Connect API providers. *
  ****************************************************************
  When z/OS Connect parsed the JSON payload of a request it did
  not detect duplicate keys. This resulted in the last specified
  value for the duplicated key being used.
  

Problem conclusion

Temporary fix

Comments

• z/OS Connect has been changed reject a request which specified
  duplicate key. HTTP status code 415 (Unsupported Media Type)
  will be returned to the client when this error is detected.
  
  The fix for this APAR is expected to be delivered by the PTFs
  for z/OS Connect V3.0.89.0 (PH64407).
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  Z/OS CONNECT EE

• Fixed component ID

  5655CE300

Applicable component levels