Validating optional request bodies

[ahx]

So (unfortunately) in OpenAPI requestBody is required: false by default. openapi_first currently treats those request bodies as optional. Meaning, if you specify a request body with the content-type as defined in the API description, it validates the request body and returns a failure if the request body is invalid. This is easy to reason about, but there are cases that might need clarification.

The current behavior is like this:

Request Content type	Request Body	Validates request body
known	not empty	yes
known	empty	yes
unknown	not empty	yes
empty	empty	no
empty	not empty	yes

Does that make sense to you?