Config option for strict API parameter filtering: api.config.general.rejectActionWithExtraParams

[mfvargo]

We had an issue where an api user was using the incorrect parameters on an API call. Having this feature would have made the API fail instead of proceeding. The bug would been found earlier.

I can see where this would be a hassle on many cases, But it would be nice for new projects.

I suppose it could be a global config item that could be overridden at the individual action level:

For Example:

export class SessionLogin extends Action {
  constructor() {
    super();
    this.name = "login";
    this.description = "login a user on the site";
    this.rejectActionWithTooManyParams = true; // apply this rule on this specific action
    this.inputs = {
      email: { required: true },
      password: { required: true },
      token: { required: false },
      asDefendantRep: {
        required: false,
        default: false,
        formatter: (param) => {
          return param !== "false" && param !== false;
        },
      },
    };
  }