MethodNotAllowedException using POST or PATCH with REST on 8.3.2

Hi Daniel,

I have custom entities and have activated the REST endpoint configurations by using the REST UI module. As I mentioned, I didn't make any changes except updating Drupal from 8.2.6 to 8.3.2 by using composer.

Back to your question. I have made a test POST to my local system in the following way.

• Endpoint: /entity/country?_format=json
• Authorization: Basic cmVtcmFtOnJlbXJhbXBhc3M=
• Content-Type: application/json
• X-CSRF-Token: npCXrLNMiWd1igzqV3dBzI6-hiAlcLrox5e1JfTbpp3

and this is the body:

{
  "name":[{"value":"test"}]
}

Only the field name is required. I hope these information will help. If you have question, please let me know. Thank you for the help.

I'm using a chrome plugin for doing REST calls. This one I'm using right now: https://chrome.google.com/webstore/detail/restlet-client-rest-api-t/aejo...

Thank you very much for the hint about cookies :)

And the config on DB side is:
name: rest.resource.entity.country
data: a:8:{s:4:"uuid";s:36:"513efa5c-50be-456e-ac77-ba1585b4d7ac";s:8:"langcode";s:2:"en";s:6:"status";b:1;s:12:"dependencies";a:1:{s:6:"module";a:5:{i:0;s:10:"basic_auth";i:1;s:7:"country";i:2;s:3:"hal";i:3;s:13:"serialization";i:4;s:12:"simple_oauth";}}s:2:"id";s:14:"entity.country";s:9:"plugin_id";s:14:"entity:country";s:11:"granularity";s:6:"method";s:13:"configuration";a:4:{s:3:"GET";a:2:{s:17:"supported_formats";a:2:{i:0;s:8:"hal_json";i:1;s:4:"json";}s:14:"supported_auth";a:2:{i:0;s:10:"basic_auth";i:1;s:6:"oauth2";}}s:4:"POST";a:2:{s:17:"supported_formats";a:2:{i:0;s:8:"hal_json";i:1;s:4:"json";}s:14:"supported_auth";a:2:{i:0;s:10:"basic_auth";i:1;s:6:"oauth2";}}s:6:"DELETE";a:2:{s:17:"supported_formats";a:2:{i:0;s:8:"hal_json";i:1;s:4:"json";}s:14:"supported_auth";a:2:{i:0;s:10:"basic_auth";i:1;s:6:"oauth2";}}s:5:"PATCH";a:2:{s:17:"supported_formats";a:2:{i:0;s:8:"hal_json";i:1;s:4:"json";}s:14:"supported_auth";a:2:{i:0;s:10:"basic_auth";i:1;s:6:"oauth2";}}}}

Oh sorry for the misunderstanding... I didn't create any REST resources. As I understood, I just need to activate the web services part and the permission to the user. Do I need to create custom REST resources? Thank you for the help.

I have created a custom RestResponse. It works for me now. But I still have the question: Why I was able to make REST request before the update of Drupal without this custom RestResponse?

namespace Drupal\country\Plugin\rest\resource;

use Drupal\Core\Entity\EntityTypeManagerInterface;
use Drupal\Core\Session\AccountProxyInterface;
use Drupal\rest\Plugin\rest\resource\EntityResourceValidationTrait;
use Drupal\rest\ResourceResponse;
use Symfony\Component\HttpFoundation\Request;
use Drupal\Core\Entity\EntityStorageException;
use Drupal\rest\Plugin\ResourceBase;
use Psr\Log\LoggerInterface;
use Symfony\Component\DependencyInjection\ContainerInterface;
use Drupal\rest\ModifiedResourceResponse;
use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
use Symfony\Component\HttpKernel\Exception\HttpException;


/**
 * Provides a resource to get view modes by entity and bundle.
 *
 * @RestResource(
 *   id = "country_rest_resource",
 *   label = @Translation("Country rest resource"),
 *   uri_paths = {
 *     "canonical" = "/admin/structure/country/{entity}",
 *     "https://www.drupal.org/link-relations/create" = "/admin/structure/country"
 *   }
 * )
 */
class CountryRestResource extends ResourceBase {

  use EntityResourceValidationTrait;

  /**
   * A current user instance.
   *
   * @var \Drupal\Core\Session\AccountProxyInterface
   */
  protected $currentUser;

  /**
   * A current entity type manager interface
   *
   * @var EntityTypeManagerInterface
   */
  protected $entityTypeManager;

  /**
   * Constructs a new CountryRestResource object.
   *
   * @param array $configuration
   *   A configuration array containing information about the plugin instance.
   * @param string $plugin_id
   *   The plugin_id for the plugin instance.
   * @param mixed $plugin_definition
   *   The plugin implementation definition.
   * @param array $serializer_formats
   *   The available serialization formats.
   * @param \Psr\Log\LoggerInterface $logger
   *   A logger instance.
   * @param \Drupal\Core\Session\AccountProxyInterface $current_user
   *   A current user instance.
   * @param \Drupal\Core\Entity\EntityTypeManagerInterface $entity_type_manager
   *   A current entity type manager interface
   */
  public function __construct(
    array $configuration,
    $plugin_id,
    $plugin_definition,
    array $serializer_formats,
    LoggerInterface $logger,
    AccountProxyInterface $current_user,
    EntityTypeManagerInterface $entity_type_manager) {
    parent::__construct($configuration, $plugin_id, $plugin_definition, $serializer_formats, $logger);

    $this->currentUser = $current_user;
    $this->entityTypeManager = $entity_type_manager;
  }

  /**
   * {@inheritdoc}
   */
  public static function create(ContainerInterface $container, array $configuration, $plugin_id, $plugin_definition) {
    return new static(
      $configuration,
      $plugin_id,
      $plugin_definition,
      $container->getParameter('serializer.formats'),
      $container->get('logger.factory')->get('country'),
      $container->get('current_user'),
      $container->get('entity_type.manager')
    );
  }

  /**
   * Responds to POST requests.
   *
   * Returns a list of bundles for specified entity.
   *
   * @throws \Symfony\Component\HttpKernel\Exception\HttpException
   *   Throws exception expected.
   *
   * @param array $data
   * @param \Symfony\Component\HttpFoundation\Request $request
   * @return \Drupal\rest\ResourceResponse
   */
  public function post(array $data, Request $request) {

    // You must to implement the logic of your REST Resource here.
    // Use current user after pass authentication to validate access.
    if (!$this->currentUser->hasPermission('access content')) {
      throw new AccessDeniedHttpException();
    }

    $pluginDefinition = $this->getPluginDefinition();

    if(isset($pluginDefinition['provider'])) {
      $entity = $this->entityTypeManager->getStorage($pluginDefinition['provider'])->create($data);
      $this->validate($entity);

      try {
        $entity->save();
        $this->logger->notice('Created entity %type with ID %id.', ['%type' => $entity->getEntityTypeId(), '%id' => $entity->id()]);

        // 201 Created responses return the newly created entity in the response
        // body. These responses are not cacheable, so we add no cacheability
        // metadata here.
        $headers = [];
        if (in_array('canonical', $entity->uriRelationships(), TRUE)) {
          $url = $entity->toUrl('canonical', ['absolute' => TRUE])->toString(true);
          $headers['Location'] = $url->getGeneratedUrl();
        }
        return new ModifiedResourceResponse($entity, 201, $headers);
      }
      catch (EntityStorageException $e) {
        throw new HttpException(500, 'Internal Server Error', $e);
      }
    }

    return new ResourceResponse('Data provider was missing. No data has been added.', 500);
  }
}

No problem :) Indeed I have followed your hints and I have compared both config files of rest.entity.country.POST.

The result you can see it on image below. The path_prefix is empty since my update to Drupal 8.3.2. After updating Drupal I have run Drush command to update the DB. Maybe Drush is doing something wrong! drush updb

The path is missing in all other config files like:

• rest.entity.country.PATCH
• rest.entity.country.GET.json
• rest.entity.country.DELETE

Dump of rest.entity.country.POST in Drupal 8.3.2
C:31:"Symfony\Component\Routing\Route":1365:{a:9:{s:4:"path";s:15:"/entity/country";s:4:"host";s:0:"";s:8:"defaults";a:2:{s:11:"_controller";s:34:"Drupal\rest\RequestHandler::handle";s:21:"_rest_resource_config";s:14:"entity.country";}s:12:"requirements";a:4:{s:7:"_access";s:4:"TRUE";s:7:"_method";s:4:"POST";s:26:"_csrf_request_header_token";s:4:"TRUE";s:20:"_content_type_format";s:13:"hal_json|json";}s:7:"options";a:6:{s:14:"compiler_class";s:34:"\Drupal\Core\Routing\RouteCompiler";s:10:"parameters";a:1:{s:7:"country";a:2:{s:4:"type";s:14:"entity:country";s:9:"converter";s:21:"paramconverter.entity";}}s:5:"_auth";a:2:{i:0;s:10:"basic_auth";i:1;s:6:"oauth2";}s:14:"_route_filters";a:2:{i:0;s:13:"method_filter";i:1;s:27:"content_type_header_matcher";}s:16:"_route_enhancers";a:1:{i:0;s:31:"route_enhancer.param_conversion";}s:14:"_access_checks";a:2:{i:0;s:20:"access_check.default";i:1;s:24:"access_check.header.csrf";}}s:7:"schemes";a:0:{}s:7:"methods";a:1:{i:0;s:4:"POST";}s:9:"condition";s:0:"";s:8:"compiled";C:33:"Drupal\Core\Routing\CompiledRoute":340:{a:11:{s:4:"vars";a:0:{}s:11:"path_prefix";s:0:"";s:10:"path_regex";s:20:"#^/entity/country$#s";s:11:"path_tokens";a:1:{i:0;a:2:{i:0;s:4:"text";i:1;s:15:"/entity/country";}}s:9:"path_vars";a:0:{}s:10:"host_regex";N;s:11:"host_tokens";a:0:{}s:9:"host_vars";a:0:{}s:3:"fit";i:3;s:14:"patternOutline";s:15:"/entity/country";s:8:"numParts";i:2;}}}}

Dump of rest.entity.country.POST in Drupal 8.2.6
C:31:"Symfony\Component\Routing\Route":1385:{a:9:{s:4:"path";s:15:"/entity/country";s:4:"host";s:0:"";s:8:"defaults";a:2:{s:11:"_controller";s:34:"Drupal\rest\RequestHandler::handle";s:21:"_rest_resource_config";s:14:"entity.country";}s:12:"requirements";a:4:{s:7:"_access";s:4:"TRUE";s:7:"_method";s:4:"POST";s:20:"_content_type_format";s:17:"hal_json|json|xml";s:26:"_csrf_request_header_token";s:4:"TRUE";}s:7:"options";a:6:{s:14:"compiler_class";s:34:"\Drupal\Core\Routing\RouteCompiler";s:10:"parameters";a:1:{s:7:"country";a:2:{s:4:"type";s:14:"entity:country";s:9:"converter";s:21:"paramconverter.entity";}}s:5:"_auth";a:2:{i:0;s:10:"basic_auth";i:1;s:6:"oauth2";}s:14:"_route_filters";a:2:{i:0;s:13:"method_filter";i:1;s:27:"content_type_header_matcher";}s:16:"_route_enhancers";a:1:{i:0;s:31:"route_enhancer.param_conversion";}s:14:"_access_checks";a:2:{i:0;s:20:"access_check.default";i:1;s:24:"access_check.header.csrf";}}s:7:"schemes";a:0:{}s:7:"methods";a:1:{i:0;s:4:"POST";}s:9:"condition";s:0:"";s:8:"compiled";C:33:"Drupal\Core\Routing\CompiledRoute":356:{a:11:{s:4:"vars";a:0:{}s:11:"path_prefix";s:15:"/entity/country";s:10:"path_regex";s:20:"#^/entity/country$#s";s:11:"path_tokens";a:1:{i:0;a:2:{i:0;s:4:"text";i:1;s:15:"/entity/country";}}s:9:"path_vars";a:0:{}s:10:"host_regex";N;s:11:"host_tokens";a:0:{}s:9:"host_vars";a:0:{}s:3:"fit";i:3;s:14:"patternOutline";s:15:"/entity/country";s:8:"numParts";i:2;}}}}

In case of patching I'm still getting the same error like before. It doesn't matter if I'm using the default functionality or using my custom RestResource.

Uncaught PHP Exception Symfony\\Component\\Routing\\Exception\\MethodNotAllowedException: "" at /core/lib/Drupal/Core/Routing/Router.php line 158

Are there any workarounds?

After a while i gave up with my attempts... After replacing the database, REST for my custom entities is working as it should. I really have no clue where the problem was.

This really strange by using none-admin account it should work. Well I can't reproduce the problem again, because I have replaced the database and all configuration.

Thank you guys for the inputs and I really hope for a proper solution for all who stucks with this issue.