Skip to content

Latest commit

 

History

History
56 lines (40 loc) · 2.45 KB

README.md

File metadata and controls

56 lines (40 loc) · 2.45 KB
Raw

openapi-cop

OpenAPI Compliance Proxy that validates requests and responses against an OpenAPI document.

Concept

Place the proxy between a client (e.g. a frontend app) and a web server to catch invalid requests or responses during development.

Proxy Diagram

The proxy validates the requests and responses in the communication with a target server. By default, the proxy will respond with a 500 status code when the validation fails. In production environments, you can set the silent flag to forward unmodified response bodies.

You can find more information at the GitHub page.

Usage

Inside the container, openapi-cop will listen on 0.0.0.0 and port 8888. You should expose this port to the host. Make sure as well that the container running openapi-cop has access to the target server (see TARGET below).

The image accepts the following environment variables, which correspond to the same openapi-cop CLI flags:

  • TARGET: Full base path of the target API (format: http(s)://host:port/basePath).
  • FILE: The file path or URI pointing to the OpenAPI definition file. Supports JSON or YAML.
  • DEFAULT_FORBID_ADDITIONAL_PROPERTIES: When set, additional properties that are not present in the OpenAPI definition are not allowed.
  • SILENT: When set, the proxy will forward response bodies unchanged and only set validation headers.
  • VERBOSE: When set, activates verbose output.
  • NODE_ENV (default: "production"): When set to "development", stack traces will also be logged.

Example

The following command will run the proxy against a provided target server, taking as a reference a given local openapi.json file and running in "silent" mode, and use the host's network.

docker run -it --network="host" \
    -v "$(pwd)/local/openapi.json:/openapi.json" \
    --env "TARGET=http://my-target-server:1234/baseApi/v1" \
    --env "FILE=/openapi.json" \
    --env "SILENT=1" \
    lxlu/openapi-cop

Then curl http://0.0.0.0:8888/some-target-endpoint will respond the same as curl http://my-target-server:1234/baseApi/v1/some-target-endpoint but with additional openapi-cop headers.

License

See https://github.com/EXXETA/openapi-cop/blob/main/LICENSE.