Harden JSON request decoding in Cloud plugin API handlers

[nickmisasi]

Summary

Tighten JSON request body handling for Cloud plugin API endpoints so invalid request bodies are rejected with a client error instead of disrupting the plugin process. Adds regression coverage for the affected handlers.

Ticket Link

N/A (internally reported)

Release Note

NONE

Made with Cursor

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 691408cb-14c6-4ce6-992a-7de658493d76

📥 Commits

Reviewing files that changed from the base of the PR and between 6205b58 and b1c76d4.

📒 Files selected for processing (2)

• server/api.go
• server/api_test.go

---

📝 Walkthrough

Walkthrough

Three API handlers now decode JSON into concrete request structs. A table-driven regression test verifies that null request bodies produce 400 Bad Request responses without causing panics.

Changes

JSON request decoding

Layer / File(s)	Summary
Concrete request decoding and regression coverage server/api.go, server/api_test.go	The user-install, deletion-lock, and deletion-unlock handlers decode into struct values, while a table-driven test validates safe handling of null JSON bodies and the expected 400 Bad Request response.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main change: hardening JSON request decoding in Cloud plugin API handlers.
Description check	✅ Passed	The description matches the changeset by describing stricter request handling and regression coverage.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix-null

---

_{Comment @coderabbitai help to get the list of available commands.}