symfony
diff --git a/‎src/Symfony/Component/HttpKernel/Attribute/MapRequestPayload.php‎
Lines changed: 4 additions & 1 deletion b/‎src/Symfony/Component/HttpKernel/Attribute/MapRequestPayload.php‎
Lines changed: 4 additions & 1 deletion
diff --git a/‎src/Symfony/Component/HttpKernel/Controller/ArgumentResolver/RequestPayloadValueResolver.php‎
Lines changed: 12 additions & 7 deletions b/‎src/Symfony/Component/HttpKernel/Controller/ArgumentResolver/RequestPayloadValueResolver.php‎
Lines changed: 12 additions & 7 deletions
diff --git a/‎src/Symfony/Component/HttpKernel/Tests/Controller/ArgumentResolver/RequestPayloadValueResolverTest.php‎
Lines changed: 8 additions & 0 deletions b/‎src/Symfony/Component/HttpKernel/Tests/Controller/ArgumentResolver/RequestPayloadValueResolverTest.php‎
Lines changed: 8 additions & 0 deletions
@@ -12,6 +12,7 @@
 namespace Symfony\Component\HttpKernel\Attribute;
 
 use Symfony\Component\HttpKernel\Controller\ArgumentResolver\RequestPayloadValueResolver;
+use Symfony\Component\Validator\Constraints\GroupSequence;
 
 /**
  * Controller parameter tag to map the request content to typed object and validate it.
@@ -22,7 +23,9 @@
 class MapRequestPayload extends ValueResolver
 {
     public function __construct(
-        public readonly array $context = [],
+        public readonly array|string|null $acceptFormat = null,
+        public readonly array $serializationContext = [],
+        public readonly string|GroupSequence|array|null $validationGroups = null,
         string $resolver = RequestPayloadValueResolver::class,
     ) {
         parent::__construct($resolver);
 
@@ -92,7 +92,7 @@ public function resolve(Request $request, ArgumentMetadata $argument): iterable
                 }
 
                 if (null !== $payload) {
-                    $violations->addAll($this->validator->validate($payload));
+                    $violations->addAll($this->validator->validate($payload, null, $attributes[0]->validationGroups ?? null));
                 }
 
                 if (\count($violations)) {
@@ -125,24 +125,29 @@ private function mapQueryString(Request $request, string $type, MapQueryString $
 
     private function mapRequestPayload(Request $request, string $type, MapRequestPayload $attribute): ?object
     {
+        if (null === $format = $request->getContentTypeFormat()) {
+            throw new HttpException(Response::HTTP_UNSUPPORTED_MEDIA_TYPE, 'Unsupported format.');
+        }
+
+        $acceptFormat = \is_string($attribute->acceptFormat) ? [$attribute->acceptFormat] : $attribute->acceptFormat;
+        if ($attribute->acceptFormat && !\in_array($format, $acceptFormat, true)) {
+            throw new HttpException(Response::HTTP_UNSUPPORTED_MEDIA_TYPE, sprintf('Unsupported format, expects "%s", but "%s" given.', implode('", "', $acceptFormat), $format));
+        }
+
         if ($data = $request->request->all()) {
-            return $this->serializer->denormalize($data, $type, null, self::CONTEXT_DENORMALIZE + $attribute->context);
+            return $this->serializer->denormalize($data, $type, null, self::CONTEXT_DENORMALIZE + $attribute->serializationContext);
         }
 
         if ('' === $data = $request->getContent()) {
             return null;
         }
 
-        if (null === $format = $request->getContentTypeFormat()) {
-            throw new HttpException(Response::HTTP_UNSUPPORTED_MEDIA_TYPE, 'Unsupported format.');
-        }
-
         if ('form' === $format) {
             throw new HttpException(Response::HTTP_BAD_REQUEST, 'Request payload contains invalid "form" data.');
         }
 
         try {
-            return $this->serializer->deserialize($data, $type, $format, self::CONTEXT_DESERIALIZE + $attribute->context);
+            return $this->serializer->deserialize($data, $type, $format, self::CONTEXT_DESERIALIZE + $attribute->serializationContext);
         } catch (UnsupportedFormatException $e) {
             throw new HttpException(Response::HTTP_UNSUPPORTED_MEDIA_TYPE, sprintf('Unsupported format: "%s".', $format), $e);
         } catch (NotEncodableValueException $e) {
 
@@ -181,6 +181,14 @@ public function testRequestInputValidationPassed()
 
         $this->assertEquals($payload, $resolver->resolve($request, $argument)[0]);
     }
+
+    public function testNonSupportedRestrictedFormatMustThrowUnsupportedMediaTypeException()
+    {
+    }
+
+    public function testRestrictGroupValidation()
+    {
+    }
 }
 
 class RequestPayload
Original file line number	Diff line number	Diff line change
`@@ -181,6 +181,14 @@ public function testRequestInputValidationPassed()`
`181`	`181`
`182`	`182`	`$this->assertEquals($payload, $resolver->resolve($request, $argument)[0]);`
`183`	`183`	`}`
	`184`	`+`
	`185`	`+ public function testNonSupportedRestrictedFormatMustThrowUnsupportedMediaTypeException()`
	`186`	`+ {`
	`187`	`+ }`
	`188`	`+`
	`189`	`+ public function testRestrictGroupValidation()`
	`190`	`+ {`
	`191`	`+ }`
`184`	`192`	`}`
`185`	`193`
`186`	`194`	`class RequestPayload`