Summary

This PR introduces a new generator property, strictResponseDecoding, to the go-server generator. When enabled (the new default), every JSON decoder in generated handlers will call DisallowUnknownFields(), causing the server to reject any incoming payloads that contain fields not defined in the spec. Users can disable strict mode and allow extra fields by passing --additional-properties strictResponseDecoding=false. Fixes issue #21446.

Changes

1. Codegen configuration

   • File: GoServerCodegen.java

   • What’s changed:

     • Added a STRICT_RESPONSE_DECODING CLI option (default: true).
     • Exposed strictResponseDecoding boolean in additionalProperties for use in templates.

2. Template guard

   • File: server.mustache

   • What’s changed:

     • Wrapped the call to decoder.DisallowUnknownFields() in a {{#strictResponseDecoding}}…{{/strictResponseDecoding}} block.

3. Documentation

   • File: Go-server README (modules/openapi-generator/README.md)

   • What’s changed:

     • Documented the new --additional-properties=strictResponseDecoding={true|false} flag, its default behavior, and usage example.

Impact

• Backward compatibility:

  • Default behavior is now “strict” (reject unknown fields). Users relying on permissive parsing must explicitly opt out.

• Client generation:

  • No impact; this change applies only to the go-server generator.

Usage Example

# Strict mode (default):
openapi-generator generate \
  -i api.yaml \
  -g go-server

# Permissive mode:
openapi-generator generate \
  -i api.yaml \
  -g go-server \
  --additional-properties strictResponseDecoding=false

Checklist

• Added CLI option in GoServerCodegen.java
• Updated server.mustache template
• Updated Go-server README with documentation

@antihax @grokify @kemokemo @jirikuncar @ph4r5h4d @lwj5

PR checklist

• Read the contribution guidelines.
• Pull Request title clearly describes the work in the pull request and Pull Request description provides details about how to validate the work. Missing information here may result in delayed response from the community.
• Run the following to build the project and update samples:

  ./mvnw clean package || exit
  ./bin/generate-samples.sh ./bin/configs/*.yaml || exit
  ./bin/utils/export_docs_generators.sh || exit
  

• File the PR against the correct branch: master (upcoming 7.x.0 minor release - breaking changes with fallbacks), 8.0.x (breaking changes without fallbacks)
• If your PR is targeting a particular programming language, @mention the technical committee members, so they are more likely to review the pull request.