compaREST: Compatibility checker for OpenAPI

[ library, mit, program, web ] [ Propose Tags ] [ Report a vulnerability ]

Compatibility checker for OpenAPI.


[Skip to Readme]

Downloads

Maintainer's Corner

Package maintainers

For package maintainers and hackage trustees

Candidates

Versions [RSS] 0.1.0.0, 0.1.0.1
Change log CHANGELOG.md
Dependencies aeson (>=1.5.6.0 && <1.6), attoparsec (>=0.13.2.5 && <0.14), base (>=4.12.0.0 && <4.16), bytestring (>=0.10.12.0 && <0.11), comonad (>=5.0.8 && <5.1), compaREST, containers (>=0.6.5.1 && <0.7), data-default (>=0.7.1.1 && <0.8), doctemplates (>=0.9 && <0.10), envy (>=2.1.0.0 && <2.2), file-embed (>=0.0.15.0 && <0.1), filepath (>=1.4.2.1 && <1.5), free (>=5.1.7 && <5.2), freer-simple (>=1.2.1.2 && <1.3), generic-data (>=0.9.2.1 && <0.10), github (>=0.26 && <0.27), hashable (>=1.3.0.0 && <1.4), http-media (>=0.8.0.0 && <0.9), insert-ordered-containers (>=0.2.5.1 && <0.3), lattices (>=2.0.2 && <2.1), mtl (>=2.2.2 && <2.3), open-union (>=0.4.0.0 && <0.5), openapi3 (>=3.1.0 && <3.2), optparse-applicative (>=0.16.1.0 && <0.17), ordered-containers (>=0.2.2 && <0.3), pandoc (>=2.14.0.3 && <2.15), pandoc-types (>=1.22.1 && <1.23), pcre2 (>=1.1.5 && <1.2), scientific (>=0.3.7.0 && <0.4), tagged (>=0.8.6.1 && <0.9), text (>=1.2.4.1 && <1.3), transformers (>=0.5.6.2 && <0.6), type-fun (>=0.1.3 && <0.2), typerep-map (>=0.3.3.0 && <0.4), unordered-containers (>=0.2.16.0 && <0.3), vector (>=0.12.3.1 && <0.13), yaml (>=0.11.8.0 && <0.12) [details]
Tested with ghc ==8.10.4
License MIT
Copyright 2021 Typeable
Author Typeable
Maintainer compaREST@typeable.io
Category Web
Uploaded by iko at 2022-03-04T16:00:21Z
Distributions
Executables compaREST-GitHub-Action, compaREST
Downloads 231 total (4 in the last 30 days)
Rating (no votes yet) [estimated by Bayesian average]
Your Rating
  • λ
  • λ
  • λ
Status Docs available [build log]
Last success reported on 2022-03-04 [all 1 reports]

Readme for compaREST-0.1.0.1

[back to package description]

compaREST

Hackage MIT license

Compatibility checker for OpenAPI

Using compaREST in Github Actions

Add the following step to your Github Actions workflow:

- uses: typeable/comparest if: ${{ github.event_name == 'pull_request' }} with: old: old-openapi.yaml new: new-openapi.yaml 

The new and old values should be paths to your OpenAPI specifications you want to compare.

You will get something like this in your pull requests:

For more detail please see our integration guide.

An example

Your situation

You are developing a very important server with a REST API. You have clients who use your API that you do not control. Say, you are also developing a mobile app that uses your API and you can't force someone to update to the latest version. (Or you prefer not to for UX reasons.)

You have recently released version 1.0 and things are going great: user are downloading your app, servers are processing requests.

You describe your API in a file api-1.0.0.yaml:

openapi: "3.0.0" info: version: 1.0.0 title: Swagger Petstore license: name: MIT servers: - url: https://example.com paths: /pets: get: parameters: - name: limit in: query required: false schema: type: integer maximum: 20 responses: "200": description: "" headers: x-next: schema: type: string content: application/json: schema: $ref: "#/components/schemas/Pets" post: requestBody: content: application/json: schema: $ref: "#/components/schemas/Pet" responses: "201": description: "" components: schemas: Pet: type: object required: - id - name properties: id: type: integer name: type: string minLength: 3 maxLength: 10 Pets: type: array items: $ref: "#/components/schemas/Pet" 

Evolving your product

Enthused over your initial success you hurry to release a new and improved version of your API and mobile app.

After a round of very intense programming you take a look at your new api-1.1.0.yaml:

openapi: "3.0.0" info: version: 1.1.0 title: Swagger Petstore license: name: MIT servers: - url: https://example.com paths: /pets: get: parameters: - name: limit in: query required: false schema: type: integer maximum: 30 responses: "200": description: "" headers: x-next: schema: type: string content: application/json: schema: $ref: "#/components/schemas/Pets" post: requestBody: content: application/json: schema: $ref: "#/components/schemas/Pet" responses: "201": description: "" components: schemas: Pet: type: object required: - id - name properties: id: type: integer name: type: string minLength: 1 maxLength: 15 weight: type: integer Pets: type: array items: $ref: "#/components/schemas/Pet" 

Looking at the very large and complex API description, you grow more and more concerned that your old mobile app might stop working when you update the server. But the spec is too large and too complex to reasonably assess this manually.

Assessing compatibility automatically

Luckily, you have access to compaREST which can programmatically analyze your APIs and determine what, if anything, breaks compatibility and what doesn't.

You can call it, passing the API your client will be aware of, and the API your server will serve like so:

docker run --rm -v $(pwd):/data:rw typeable/comparest --client /data/api-1.0.0.yaml --server /data/api-1.1.0.yaml --output /data/report.md 

Running this command will output a file report.md, containing the compatibility report between the two APIs:

Summary

❌ Breaking changes ⚠️ Non-breaking changes
5 6

❌ Breaking changes

GET /pets

⬅️☁️ JSON Response – 200

$[*].name(String)

  1. Maximum length of the string changed from 10 to 15.

  2. Minimum length of the string changed from 3 to 1.

POST /pets

➡️☁️ JSON Request

$.weight

  1. Values are now limited to the following types:

    • Number
  2. The property was previously implicitly described by the catch-all "additional properties" case. It is now explicitly defined.

$.weight(Number)

Value is now a multiple of 1.0.

⚠️ Non-breaking changes

GET /pets

Parameter limit

JSON Schema

$(Number)

Upper bound changed from 20.0 inclusive to 30.0 inclusive.

⬅️☁️ JSON Response – 200

$[*].weight

  1. Values are now limited to the following types:

    • Number
  2. The property was previously implicitly described by the catch-all "additional properties" case. It is now explicitly defined.

$[*].weight(Number)

Value is now a multiple of 1.0.

POST /pets

➡️☁️ JSON Request

$.name(String)

  1. Maximum length of the string changed from 10 to 15.

  2. Minimum length of the string changed from 3 to 1.

You now know exactly in what situations and in what way your 1.0 version of the app will break if you deploy your 1.1 version of the server.

Additional formats

You can also produce a self-contained HTML report that you can open in your browser by simply omitting the file extension of the output file:

docker run --rm -v $(pwd):/data:rw typeable/comparest --client /data/api-1.0.0.yaml --server /data/api-1.1.0.yaml --output /data/report 

CLI docs

For more detail please see our user guide.

Usage: comparest (-c|--client ARG) (-s|--server ARG) [--silent | --only-breaking | --all] [-o|--output ARG] [--folding-block-quotes-style | --header-style] [--signal-exit-code] A tool to check compatibility between two OpenAPI specifications. Usage examples Compare files old.yaml with new.yaml and output the resulting report to stdout: comparest -c old.yaml -s new.yaml Only output breaking changes and write a styled HTML report to file report.html: comparest -c old.yaml -s new.yaml --only-breaking -o report Don't output anything, only fail if there are breaking changes: comparest -c old.json -s new.json --silent Write full report suitable for embedding into a GitHub comment to report.html: comparest -c old.json -s new.json --folding-block-quotes-style -o report.html Available options: -h,--help Show this help text -c,--client ARG A path to the file containing the specification that will be used for the client of the API. Can be either a YAML or JSON file. -s,--server ARG A path to the file containing the specification that will be used for the server of the API. Can be either a YAML or JSON file. --silent Silence all output. Only makes sense in combination with --signal-exit-code. --only-breaking Only report breaking changes in the output. --all Report both incompatible and compatible changes. Compatible changes will not trigger a failure exit code. -o,--output ARG The file path where the output should be written. If the option is omitted the result will be written to stdout. The file extension is used to determine the type of the output file. Supports many formats such as markdown, html, rtf, doc, txt, rst, and many more. Leave out the extension to produce a self-contained HTML report with styling. --folding-block-quotes-style The report tree is structured using summary/detail HTML elements and indented using block quotes. This style renders well on GitHub.Intended for HTML output format. Markdown has rendering bugs on GitHub. --header-style The report tree is structured using increasing levels of headers. --signal-exit-code Signal API compatibility with the exit code. Exit with 0 if there are no breaking changes. Exit with 1 if there are breaking changes. Exit with 2 if could not determine compatibility.