Repository navigation
HTTP: POST /api/v1/begin with a body that is not valid JSON answers 204 at the default isolation (an invalid isolationLevel gets 400 since #10318) #10337
Description
POST /api/v1/begin/{database} with a body that is not valid JSON opens the transaction at the default isolation and answers 204, while every invalid isolationLevel value gets a 400 since #10318. A client that meant to ask for REPEATABLE_READ and sent a truncated or garbled body gets read committed with a success status; the only trace is a server-side warning: Error parsing request payload: Invalid JSON object format: {"isolationLevel":.
Main 6d7e4400a3, server in-process, one session reads a record (v = 1), a second request commits v = 99, the session reads it again:
body (Content-Type: application/json) |
status | second read |
|---|---|---|
{"isolationLevel":"REPEATABLE_READ"} |
204 | stays 1 (repeatable) |
{"isolationLevel":"SERIALIZABLE"} |
400 | no session |
{"isolationLevel":""} |
400 | no session |
{"isolationLevel": |
204 | reads 99 (read committed) |
The parse error is caught in AbstractServerHttpHandler (logged at WARNING, payload left null), so any handler whose body is optional goes on without it; /begin is where that changes what the client gets. I would expect a 400 for a body that does not parse, as for an invalid value.
Activity
test(ArcadeData#10337): begin refuses every body shape that is not a …
fix(server): reject malformed begin payloads (#10345)
lvca commentedon Oct 19, 2026
Fixed by #10345 (thanks @7487 for the report and the fix).
POST /api/v1/begin/{database}with a body that is not a valid JSON object (truncated, garbled, a scalar or a top-level array) now answers400and starts no transaction, instead of silently opening one at the default isolation level. A request with no body, a blank body or a valid JSON object behaves as before.The HTTP API documentation for
/beginhas been updated accordingly.❤️ Thanks for helping make ArcadeDB better! ArcadeDB is free and open source, sustained by its community. If it's useful to you or your company, please consider becoming a sponsor to keep development going.
fix(server): reject malformed begin payloads (#10345)