Disallow random properties

Author: pranavkm

src/Components/Components/src/ElementReference.cs

@@ -64,10 +64,21 @@ public override ElementReference Read(ref Utf8JsonReader reader, Type typeToConv
                 string id = null;
                 while (reader.Read() && reader.TokenType != JsonTokenType.EndObject)
                 {
-                    if (reader.ValueTextEquals(IdProperty.EncodedUtf8Bytes))
+                    if (reader.TokenType == JsonTokenType.PropertyName)
                     {
-                        reader.Read();
-                        id = reader.GetString();
+                        if (reader.ValueTextEquals(IdProperty.EncodedUtf8Bytes))
+                        {
+                            reader.Read();
+                            id = reader.GetString();
+                        }
+                        else
+                        {
+                            throw new JsonException($"Unexpected JSON property '{reader.GetString()}'.");
+                        }
+                    }
+                    else
+                    {
+                        throw new JsonException($"Unexcepted JSON Token {reader.TokenType}.");
                     }
                 }
 

src/Components/Components/test/ElementReferenceTest.cs

@@ -54,14 +54,27 @@ public void Deserializing_WithFormatting_Works()
         }
 
         [Fact]
-        public void Deserializing_Throws_IfIdIsNotSpecified()
+        public void Deserializing_Throws_IfUnknownPropertyAppears()
         {
             // Arrange
             var json = "{\"id\":\"some-value\"}";
 
             // Act
             var ex = Assert.Throws<JsonException>(() => JsonSerializer.Deserialize<ElementReference>(json, JsonSerializerOptionsProvider.Options));
 
+            // Assert
+            Assert.Equal("Unexpected JSON property 'id'.", ex.Message);
+        }
+
+        [Fact]
+        public void Deserializing_Throws_IfIdIsNotSpecified()
+        {
+            // Arrange
+            var json = "{}";
+
+            // Act
+            var ex = Assert.Throws<JsonException>(() => JsonSerializer.Deserialize<ElementReference>(json, JsonSerializerOptionsProvider.Options));
+
             // Assert
             Assert.Equal("__internalId is required.", ex.Message);
         }