From 6f855dd4ec31d0a4e16b01e2047173e94f0b04a6 Mon Sep 17 00:00:00 2001
From: Kretchen001 <83697846+Kretchen001@users.noreply.github.com>
Date: Tue, 21 May 2024 21:36:51 +0200
Subject: [PATCH] Change Query structure for swagger and [desc]

- List still uses body, it is callable from curl per bash, but not work in swagger
---
 .../AmIVulnerable/Controllers/DbController.cs        | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/code/AmIVulnerable/AmIVulnerable/Controllers/DbController.cs b/code/AmIVulnerable/AmIVulnerable/Controllers/DbController.cs
index 1992986..055f91f 100644
--- a/code/AmIVulnerable/AmIVulnerable/Controllers/DbController.cs
+++ b/code/AmIVulnerable/AmIVulnerable/Controllers/DbController.cs
@@ -198,13 +198,14 @@ public IActionResult GetFullTextCve([FromQuery] string? cve_number) {
         /// <returns>Ok with result. NoContent if empty.</returns>
         [HttpGet]
         [Route("checkSinglePackage")]
-        public IActionResult CheckSinglePackage([FromQuery] PackageForApi packageName) {
+        public IActionResult CheckSinglePackage([FromQuery] string PackageName,
+                                                    [FromQuery] string? PackageVersion) {
             if (!(this.Request.Headers.Accept.Equals("application/json") || this.Request.Headers.Accept.Equals("*/*"))) {
                 return StatusCode(406);
             }
-            using (Operation.Time($"Complete Time for Query-SingleSearch after Package \"{packageName}\"")) {
+            using (Operation.Time($"Complete Time for Query-SingleSearch after Package \"{PackageName}\"")) {
                 List<CveResult> results = [];
-                DataTable dtResult = SearchInMySql(packageName.PackageName);
+                DataTable dtResult = SearchInMySql(PackageName);
                 // convert the result
                 foreach (DataRow x in dtResult.Rows) {
                     CveResult y = new CveResult() {
@@ -240,13 +241,14 @@ public IActionResult CheckSinglePackage([FromQuery] PackageForApi packageName) {
         }
 
         /// <summary>
-        /// Search for a list of packages
+        /// Search for a list of packages.
+        /// Not useable in swagger because of body - but curl works fine.
         /// </summary>
         /// <param name="packages">List of tuple: package, version</param>
         /// <returns>OK, if exists. OK, if no package list searched. NoContent if not found.</returns>
         [HttpGet]
         [Route("checkPackageList")]
-        public async Task<IActionResult> CheckPackageListAsync([FromQuery] List<PackageForApi> packages) {
+        public async Task<IActionResult> CheckPackageListAsync([FromBody] List<PackageForApi> packages) {
             if (!(this.Request.Headers.Accept.Equals("application/json") || this.Request.Headers.Accept.Equals("*/*"))) {
                 return StatusCode(406);
             }