From 4808bf64aded277bc7c259ace666e276bc72bef3 Mon Sep 17 00:00:00 2001
From: Matej Baco <matejbacocom@gmail.com>
Date: Mon, 31 Jan 2022 19:06:41 +0100
Subject: [PATCH] Use validator on order attributes

---
 app/controllers/api/database.php | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/app/controllers/api/database.php b/app/controllers/api/database.php
index 46b9897201..a52b34c763 100644
--- a/app/controllers/api/database.php
+++ b/app/controllers/api/database.php
@@ -19,6 +19,7 @@ use Utopia\Database\Validator\Authorization;
 use Utopia\Database\Validator\Key;
 use Utopia\Database\Validator\Permissions;
 use Utopia\Database\Validator\QueryValidator;
+use Utopia\Database\Validator\OrderAttributes;
 use Utopia\Database\Validator\Queries as QueriesValidator;
 use Utopia\Database\Validator\Structure;
 use Utopia\Database\Validator\UID;
@@ -1731,6 +1732,13 @@ App::get('/v1/database/collections/:collectionId/documents')
             return $query;
         }, $queries);
 
+        if(!empty($orderAttributes)) {
+            $validator = new OrderAttributes($collection->getAttribute('attributes', []), $collection->getAttribute('indexes', []), true);
+            if (!$validator->isValid($orderAttributes)) {
+                throw new Exception($validator->getDescription(), 400);
+            }
+        }
+
         if (!empty($queries)) {
             $validator = new QueriesValidator(new QueryValidator($collection->getAttribute('attributes', [])), $collection->getAttribute('indexes', []), true);
             if (!$validator->isValid($queries)) {