Files collection with Api-Platform and VichUploadBundle - api-platform.com

Question

I am using Api-Platform in latest version and I would like my user to be able to attach multiple files when writing a note.
As a first step, I'm trying to make this work with Postman. I chose VichUploadBundle as the documentation says.
Only I'm blocked for publishing a note with attachments. I think I did it right overall, but I have to intervene again on one point, I can't find the subtlety.
I specify that I am able to create a simple file, without relation. Thanks to the custom controller. But for the relationship, I obviously need the MultipartDecoder.
The File Object :
#[Vich\Uploadable]
#[ORM\Entity]
#[ApiResource(
types: ['https://schema.org/MediaObject'],
operations: [
new Get(),
new GetCollection(),
new Post(
controller: CreateMediaObjectAction::class,
openapiContext: [
'requestBody' => [
'content' => [
'multipart/form-data' => [
'schema' => [
'type' => 'object',
'properties' => [
'file' => [
'type' => 'string',
'format' => 'binary'
]
]
]
]
]
]
],
deserialize: false
)
],
normalizationContext: ['groups' => ['media_object:get']]
)]
class MediaObject
{
#[ORM\Id, ORM\Column, ORM\GeneratedValue]
private ?int $id = null;
#[ApiProperty(types: ['https://schema.org/contentUrl'])]
#[Groups([
'media_object:get'
])]
public ?string $contentUrl = null;
#[Vich\UploadableField(mapping: "media_object", fileNameProperty: "filePath")]
public ?File $file = null;
#[ORM\Column(nullable: true)]
public ?string $filePath = null;
#[ORM\ManyToOne(inversedBy: 'files')]
#[ORM\JoinColumn(nullable: false)]
private Note $note;
public function getId(): ?int
{
return $this->id;
}
/**
* #return Note
*/
public function getNote(): Note
{
return $this->note;
}
/**
* #param Note $note
*/
public function setNote(Note $note): void
{
$this->note = $note;
}
}
Note Object :
#[ORM\Entity(repositoryClass: NoteRepository::class)]
#[ApiResource(
operations: [
new GetCollection(
normalizationContext: ['groups' => ['note:get:collection']],
security: "is_granted('ROLE_ADMIN') or is_granted('ROLE_SIEGE')"
),
new Post(
inputFormats: ['multipart' => ['multipart/form-data']],
denormalizationContext: ['groups' => ['note:post:item']],
securityPostDenormalize: "is_granted('POST_NOTE', object)"
),
new Get(
security: "is_granted('GET_NOTE', object)"
),
new Put(
denormalizationContext: ['groups' => ['note:post:item']],
security: "is_granted('PUT_NOTE', object)"
),
new Delete(
security: "is_granted('DELETE_NOTE', object)"
)
],
normalizationContext: ['groups' => ['note:get:item']],
paginationClientItemsPerPage: true,
)]
class Note
{
...
#[Groups([
'note:get:item',
'note:post:item'
])]
#[ORM\OneToMany(mappedBy: 'note', targetEntity: MediaObject::class)]
public Collection $files;
public function __construct()
{
$this->files = new ArrayCollection();
}
...
}
MultipartDecoder :
final class MultipartDecoder implements DecoderInterface
{
public const FORMAT = 'multipart';
public function __construct(private RequestStack $requestStack) {}
/**
* {#inheritdoc}
*/
public function decode(string $data, string $format, array $context = []): ?array
{
$request = $this->requestStack->getCurrentRequest();
if (!$request) {
return null;
}
return array_map(static function (string $element) {
// Multipart form values will be encoded in JSON.
$decoded = json_decode($element, true);
return \is_array($decoded) ? $decoded : $element;
}, $request->request->all()) + $request->files->all();
}
/**
* {#inheritdoc}
*/
public function supportsDecoding(string $format): bool
{
return self::FORMAT === $format;
}
}
Denormalizer :
final class UploadedFileDenormalizer implements DenormalizerInterface
{
/**
* {#inheritdoc}
*/
public function denormalize($data, string $type, string $format = null, array $context = []): UploadedFile
{
return $data;
}
/**
* {#inheritdoc}
*/
public function supportsDenormalization($data, $type, $format = null): bool
{
return $data instanceof UploadedFile;
}
}
Normalizer :
final class MediaObjectNormalizer implements NormalizerInterface, NormalizerAwareInterface
{
use NormalizerAwareTrait;
private const ALREADY_CALLED = 'MEDIA_OBJECT_NORMALIZER_ALREADY_CALLED';
public function __construct(private StorageInterface $storage)
{
}
public function normalize($object, ?string $format = null, array $context = []): array|string|int|float|bool|\ArrayObject|null
{
$context[self::ALREADY_CALLED] = true;
$object->contentUrl = $this->storage->resolveUri($object, 'file');
return $this->normalizer->normalize($object, $format, $context);
}
public function supportsNormalization($data, ?string $format = null, array $context = []): bool
{
if (isset($context[self::ALREADY_CALLED])) {
return false;
}
return $data instanceof MediaObject;
}
}
The message changes depending on whether or not there are brackets on the key files
files[] :
"Expected IRI or nested document for attribute "files", "object" given."