grafana/pkg/api
Jo edcd113054
Authz: Remove legacy API Key permissions (#110860)
* remove API key roles

* remove API key gen

* remove frontend and doc mentions

* restore legacy keygen

* restore codeowners

* prettier

* update swagger

* remove permissions including apikeys

* add migrator for removing deprecated permissions

* add tracing

* update openapi3

* simplify migrator for now

* accesscontrol/migrator: remove batching for deprecated permissions deletion
2025-09-12 13:59:37 +02:00
..
apierrors Folders/k8s: Enable all dualwriter modes on remaining integration tests (#107992) 2025-07-11 09:20:01 -03:00
avatar
datasource Prometheus: Add support for cloud partners Prometheus data sources (#103482) 2025-04-10 12:49:11 -07:00
dtos Authz: Remove legacy API Key permissions (#110860) 2025-09-12 13:59:37 +02:00
frontendlogging
pluginproxy Replace check for integration tests. (#110707) 2025-09-08 15:49:49 +02:00
response
routing
static Apply security patch security-patch-202505051005.patch (#105754) 2025-05-21 21:34:05 +03:00
webassets FS: Get CDN prefix from configuration (#110615) 2025-09-08 15:57:03 +00:00
README.md Chore: Remove Bingo as Drone is removed (#110020) 2025-08-22 13:49:44 +02:00
accesscontrol.go Authz: Remove legacy API Key permissions (#110860) 2025-09-12 13:59:37 +02:00
admin.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
admin_encryption.go admin api: Fix reencryption of private_key in signing_key table, introduce test for reencryption (#105010) 2025-05-15 09:51:25 +02:00
admin_provisioning.go
admin_provisioning_test.go
admin_test.go
admin_users.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
admin_users_test.go Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) 2025-01-10 17:37:37 +01:00
alerting.go Alerting: Update integration schema to support versions (#109969) 2025-08-28 14:46:30 -04:00
annotations.go Annotations: Use dashboard uids instead of dashboard ids (#106676) 2025-06-13 13:59:24 -05:00
annotations_test.go Folders: Split legacy out of folder.Service (and remove folder.FolderStore) (#110734) 2025-09-08 18:27:49 +03:00
api.go Authz: Remove legacy API Key permissions (#110860) 2025-09-12 13:59:37 +02:00
api_test.go
basic_auth.go
basic_auth_test.go
common_test.go K8s: refactor build handler chain func to allow easier injection from enterprise (#100777) 2025-02-15 04:08:00 +02:00
dashboard.go Support dashboard restore across API versions (#110694) 2025-09-11 13:35:58 +03:00
dashboard_permission.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
dashboard_permission_test.go
dashboard_snapshot.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
dashboard_snapshot_test.go RBAC: Remove dashboard guardians pt 3 (#102558) 2025-03-21 10:44:16 +00:00
dashboard_test.go Support dashboard restore across API versions (#110694) 2025-09-11 13:35:58 +03:00
dataproxy.go
datasources.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
datasources_test.go LBAC for datasources: GA (#99511) 2025-02-20 10:26:46 +00:00
ds_query.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
ds_query_test.go datasources: querier: renamed the "mt" builder to "qs" builder (#109779) 2025-08-19 12:37:56 +02:00
fakes.go Preinstall: Allow to set a download URL (#96535) 2024-11-29 16:02:33 +01:00
folder.go Nested folders: Remove feature flag (#109212) 2025-08-06 10:07:23 +03:00
folder_bench_test.go Folders: Split legacy out of folder.Service (and remove folder.FolderStore) (#110734) 2025-09-08 18:27:49 +03:00
folder_permission.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
folder_permission_test.go
folder_test.go Nested folders: Remove feature flag (#109212) 2025-08-06 10:07:23 +03:00
frontend_logging.go
frontend_logging_test.go
frontend_metrics.go
frontendsettings.go FS: Remove multiTenantFrontend flag (#110776) 2025-09-09 09:39:29 +00:00
frontendsettings_test.go Replace check for integration tests. (#110707) 2025-09-08 15:49:49 +02:00
grafana_com_proxy.go Plugins: Use grafana-com sso_api_token (#97096) 2024-12-02 16:04:05 +01:00
health.go Spanner-related fixes (#102376) 2025-03-19 12:34:44 +01:00
health_test.go Auth: Separate anonymous settings to its own struct (#97791) 2024-12-13 10:46:27 +01:00
http_server.go FrontendService: Add tracing and logging middleware (#107956) 2025-07-22 18:55:44 +01:00
http_server_test.go
index.go I18n: Default regional format to Accept-Language header value (#108468) 2025-07-23 09:23:05 +01:00
login.go Forbid more redirect patterns (#110337) 2025-09-02 16:12:39 +02:00
login_oauth.go
login_oauth_test.go Replace usage of http.DefaultClient and http.DefaultTransport (#104135) 2025-05-09 13:26:39 -04:00
login_test.go Authlib: Use types package rather than claims (#99243) 2025-01-21 12:06:55 +03:00
org.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
org_invite.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
org_invite_test.go
org_test.go Authlib: Use types package rather than claims (#99243) 2025-01-21 12:06:55 +03:00
org_users.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
org_users_test.go Replace check for integration tests. (#110707) 2025-09-08 15:49:49 +02:00
password.go Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) 2025-01-10 17:37:37 +01:00
playlist.go Playlists: Remove kubernetesPlaylists flag (#104171) 2025-04-22 10:39:40 +02:00
plugin_checks.go
plugin_checks_test.go
plugin_dashboards.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
plugin_dashboards_test.go
plugin_metrics.go
plugin_metrics_test.go
plugin_proxy.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
plugin_proxy_test.go
plugin_resource.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
plugin_resource_test.go Replace check for integration tests. (#110707) 2025-09-08 15:49:49 +02:00
plugins.go i18n: Fix for translations from plugin settings (#105358) 2025-05-14 10:45:28 +02:00
plugins_test.go Plugins: Add preinstall_sync config - allow plugins to be preinstalled synchronously (#105292) 2025-05-16 10:45:50 -04:00
preferences.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
preferences_test.go Preferences: Use dashboard uid for the home dashboard (#106666) 2025-06-13 07:10:44 -05:00
quota.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
quota_test.go
render.go Rendering: Add support for rate limiter (#103987) 2025-04-24 15:31:19 +02:00
search.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
short_url.go ShortURL: Avoid teris-io/shortid (#110456) 2025-09-02 17:01:20 +00:00
short_url_test.go ShortURL: Use the k8s API in the cleanup process (#109938) 2025-08-28 17:40:45 -03:00
signup.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
swagger.go Revert "Build swagger ui in seperate webpack build" (#104580) 2025-04-25 22:07:43 +01:00
swagger_responses.go K8s: Schema v2: Return 406 in /api (#101842) 2025-03-07 18:20:02 -06:00
swagger_tags.json docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
user.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
user_test.go Replace check for integration tests. (#110707) 2025-09-08 15:49:49 +02:00
user_token.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
user_token_test.go Forbid more redirect patterns (#110337) 2025-09-02 16:12:39 +02:00
utils.go Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) 2025-01-10 17:37:37 +01:00

README.md

OpenAPI specifications

Since version 8.4, HTTP API details are specified using OpenAPI v2. Starting from version 9.1, there is also an OpenAPI v3 specification (generated by the v2 one using this script).

OpenAPI annotations

The OpenAPI v2 specification is generated automatically from the annotated Go code using go-swagger which scans the source code for annotation rules. Refer to this getting started guide for getting familiar with the toolkit.

Developers modifying the HTTP API endpoints need to make sure to add the necessary annotations so that their changes are reflected into the generated specifications.

Example of endpoint annotation

The following route defines a PATCH endpoint under the /serviceaccounts/{serviceAccountId} path with tag service_accounts (used for grouping together several routes) and operation ID updateServiceAccount (used for uniquely identifying routes and associate parameters and response with them).

For enterprise endpoints make sure you add the enterprise tag as well.


// swagger:route PATCH /serviceaccounts/{serviceAccountId} service_accounts updateServiceAccount
//
// # Update service account
//
// Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation):
// action: `serviceaccounts:write` scope: `serviceaccounts:id:1` (single service account)
//
// Responses:
// 200: updateServiceAccountResponse
// 400: badRequestError
// 401: unauthorisedError
// 403: forbiddenError
// 404: notFoundError
// 500: internalServerError

The go-swagger can discover such annotations by scanning any code imported by pkg/server but by convention we place the endpoint annotations above the endpoint definition.

Example of endpoint parameters

The following struct defines the route parameters for the updateServiceAccount endpoint. The route expects:

  • a path parameter denoting the service account identifier and
  • a body parameter with the new values for the specific service account

// swagger:parameters updateServiceAccount
type UpdateServiceAccountParams struct {
	// in:path
	ServiceAccountId int64 `json:"serviceAccountId"`
	// in:body
	Body serviceaccounts.UpdateServiceAccountForm
}

Example of endpoint response

The following struct defines the response for the updateServiceAccount endpoint in case of a successful 200 response.


// swagger:response updateServiceAccountResponse
type UpdateServiceAccountResponse struct {
	// in:body
	Body struct {
		Message        string                                    `json:"message"`
		ID             int64                                     `json:"id"`
		Name           string                                    `json:"name"`
		ServiceAccount *serviceaccounts.ServiceAccountProfileDTO `json:"serviceaccount"`
	}
}

OpenAPI generation

Developers can re-create the OpenAPI v2 and v3 specifications using the following command:

make swagger-clean && make openapi3-gen

They can observe its output into the public/api-merged.json and public/openapi3.json files.

Finally, they can browser and try out both the OpenAPI v2 and v3 via the Swagger UI editor (served by the grafana server) by navigating to /swagger.

If there are any issues generating the specifications (e.g., diff containing unrelated changes to your PR or unusually large diff), please run the following command to ensure your Swagger version is up to date, then re-run the make commands.

  • go tool github.com/go-swagger/go-swagger/cmd/swagger@v0.30.6