Bug: Webargs 7 excludes unknown query args by default instead of raise exception

Context One of my flask smorest API endpoints optionally allows a first_name query param to be provided to filter the list of returned users:

@api.arguments(RetrieveUserQueryArgsSchema, location="query")

...

class RetrieveUserQueryArgsSchema(Schema):
    """
    Defines the allowed query parameters for retrieving users.
    """

    first_name = fields.String()

If an unknown param (e.g., “last_name”) is provided, an exception is normally raised.

Problem However, after upgrading my webargs pip dependency to version 7, I noticed by default it excludes unknown query params rather than raise an exception. This is breaking my automated tests.

Solution? After ensuring I have the latest version of flask, marshmallow, smorest and webargs, neither of these solutions work:

• explicitly setting unknown = RAISE as mentioned here
• adding DEFAULT_UNKNOWN_BY_LOCATION = {"query": ma.RAISE} to RetrieveUserQueryArgsSchema as mentioned here

What’s the correct fix for this? Perhaps my syntax isn’t quite right or is this a flask-smorest bug given that webargs 7 was released very recently (mid December)? Thanks!

[sirosen]

The behaviour I was looking for was to raise an exception if there are unknown query parameters that are not in the set of combined query parameters

That’s a different problem from the OP. It can be done, but not in the way that you’ve phrased. If you want your sets of arguments merged, create a new schema with merges them – then you can set unknown=RAISE and get the restrictive behavior. You could create a new schema explicitly, with inheritance, or with a schema-factory.

@lafrech, I think this issue is safe to close?

I’m happy to help add more doc – even if it duplicates webargs docs somewhat – but it looks like you’ve already taken care of the needful for this case.

[lafrech]

I just updated the docs : https://flask-smorest.readthedocs.io/en/latest/arguments.html.