package request import ( "encoding/json" "errors" "fmt" "io" "net/http" "strings" ) func DecodeJSON(w http.ResponseWriter, r *http.Request, dst interface{}) error { return decodeJSON(w, r, dst, false) } func DecodeJSONStrict(w http.ResponseWriter, r *http.Request, dst interface{}) error { return decodeJSON(w, r, dst, true) } func decodeJSON(w http.ResponseWriter, r *http.Request, dst interface{}, disallowUnknownFields bool) error { maxBytes := 1_048_576 r.Body = http.MaxBytesReader(w, r.Body, int64(maxBytes)) dec := json.NewDecoder(r.Body) if disallowUnknownFields { dec.DisallowUnknownFields() } err := dec.Decode(dst) if err != nil { var syntaxError *json.SyntaxError var unmarshalTypeError *json.UnmarshalTypeError var invalidUnmarshalError *json.InvalidUnmarshalError switch { case errors.As(err, &syntaxError): return fmt.Errorf("body contains badly-formed JSON (at character %d)", syntaxError.Offset) case errors.Is(err, io.ErrUnexpectedEOF): return errors.New("body contains badly-formed JSON") case errors.As(err, &unmarshalTypeError): if unmarshalTypeError.Field != "" { return fmt.Errorf("body contains incorrect JSON type for field %q", unmarshalTypeError.Field) } return fmt.Errorf("body contains incorrect JSON type (at character %d)", unmarshalTypeError.Offset) case errors.Is(err, io.EOF): return errors.New("body must not be empty") case strings.HasPrefix(err.Error(), "json: unknown field "): fieldName := strings.TrimPrefix(err.Error(), "json: unknown field ") return fmt.Errorf("body contains unknown key %s", fieldName) case err.Error() == "http: request body too large": return fmt.Errorf("body must not be larger than %d bytes", maxBytes) case errors.As(err, &invalidUnmarshalError): panic(err) default: return err } } err = dec.Decode(&struct{}{}) if !errors.Is(err, io.EOF) { return errors.New("body must only contain a single JSON value") } return nil }