grafana/pkg/api
Kat Yang 31fb38723d
Chore: Remove FolderID from DTO Folder (#78420)
* Chore: Remove FolderID from DTO Folder

* chore: add OrgID field to an instance of SaveDashboardCommand

* chore: add another OrgID to pair with the FolderUID:

* chore: add OrgId to Folder struct and expectedParentOrgIDs to testCase struct, unsure if last part is necessary

* Fix folder test, add expected orgID

* chore: regen specs

---------

Co-authored-by: Ida Furjesova <ida.furjesova@grafana.com>
2023-12-07 13:56:04 +01:00
..
apierrors Alerting: Fix deleting rules in a folder with matching UID in another organization (#78258) 2023-12-04 11:34:38 +02:00
avatar
datasource
dtos Chore: Remove FolderID from DTO Folder (#78420) 2023-12-07 13:56:04 +01:00
frontendlogging Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
pluginproxy FeatureToggles: Add context and and an explicit global check (#78081) 2023-11-14 12:50:27 -08:00
response Errors: Make errors the same in dev as prod (#77366) 2023-10-30 14:06:26 -04:00
routing
static
webassets Frontend: Foundations for multi tenant frontend (#78815) 2023-12-05 08:34:22 +01:00
README.md Swagger: Show k8s APIs (#78091) 2023-11-15 06:42:35 -08:00
accesscontrol.go RBAC: Update fixed annotation roles (#78756) 2023-12-01 14:50:55 +00:00
admin.go Auth: Add anonymous users view and stats (#78685) 2023-11-29 17:58:41 +01:00
admin_encryption.go
admin_provisioning.go
admin_provisioning_test.go
admin_test.go Auth: Add anonymous users view and stats (#78685) 2023-11-29 17:58:41 +01:00
admin_users.go Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130" (#78203) 2023-11-15 16:45:49 +00:00
admin_users_test.go Login: refactor auth info package (#78459) 2023-11-21 14:47:23 +01:00
alerting.go Authz: Remove use of SignedInUser copy for permission evaluation (#78448) 2023-11-22 14:20:22 +01:00
annotations.go Annotations: Remove dashboard permission checks for annotations (#78352) 2023-11-23 10:47:37 +00:00
annotations_test.go Annotations: Remove dashboard permission checks for annotations (#78352) 2023-11-23 10:47:37 +00:00
api.go Perf: Disable core kind registry (#78568) 2023-11-28 09:09:54 +01:00
apikey.go Chore: Port user services to identity.Requester (#73851) 2023-08-28 10:42:24 +02:00
basic_auth.go
basic_auth_test.go
common_test.go Auth: Split signout_redirect_url into per provider settings (#75269) 2023-11-29 14:50:21 +01:00
dashboard.go Perf: Disable core kind registry (#78568) 2023-11-28 09:09:54 +01:00
dashboard_permission.go Authz: Remove use of SignedInUser copy for permission evaluation (#78448) 2023-11-22 14:20:22 +01:00
dashboard_permission_test.go authz: Clean up acl endpoints and dashboard guardian (#73746) 2023-08-24 15:37:54 +02:00
dashboard_snapshot.go Identity: Unfurl UserID and Email in pkg/api to user identity.Requester (#76112) 2023-10-09 16:07:28 +02:00
dashboard_snapshot_test.go Authz: fix snapshot tests legacy guardian (#73823) 2023-08-28 09:49:10 +02:00
dashboard_test.go Folders: Show dashboards and folders with directly assigned permissions in "Shared" folder (#78465) 2023-12-05 16:13:31 +01:00
dataproxy.go Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
datasources.go Team LBAC: Limit access to data source (#78376) 2023-12-05 13:45:40 +02:00
datasources_test.go Team LBAC: Limit access to data source (#78376) 2023-12-05 13:45:40 +02:00
fakes.go Plugins: Add context to StaticRouteResolver and ErrorResolver interfaces (#73121) 2023-08-10 10:32:12 +02:00
featuremgmt.go Feature Management: Define HideFromAdminPage and AllowSelfServe configs (#77580) 2023-11-03 15:59:07 +00:00
featuremgmt_test.go Feature Management: Define HideFromAdminPage and AllowSelfServe configs (#77580) 2023-11-03 15:59:07 +00:00
folder.go Fix capitalising Folder structs (#79207) 2023-12-07 13:15:58 +01:00
folder_bench_test.go Folders: Show dashboards and folders with directly assigned permissions in "Shared" folder (#78465) 2023-12-05 16:13:31 +01:00
folder_permission.go Authz: Remove use of SignedInUser copy for permission evaluation (#78448) 2023-11-22 14:20:22 +01:00
folder_permission_test.go Chore: Deprecate ID from Folder (#78281) 2023-11-20 15:44:51 -05:00
folder_test.go Chore: Remove FolderID from DTO Folder (#78420) 2023-12-07 13:56:04 +01:00
frontend_logging.go Plugins: Add context to StaticRouteResolver and ErrorResolver interfaces (#73121) 2023-08-10 10:32:12 +02:00
frontend_logging_test.go Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
frontend_metrics.go
frontendsettings.go Folders: Show dashboards and folders with directly assigned permissions in "Shared" folder (#78465) 2023-12-05 16:13:31 +01:00
frontendsettings_test.go FeatureToggles: Add context and and an explicit global check (#78081) 2023-11-14 12:50:27 -08:00
grafana_com_proxy.go
health.go
health_test.go HealthCheck: show enterprise commit (#75242) 2023-09-22 08:17:10 -03:00
http_server.go K8s: Refactor metrics to share k8s registry (#79106) 2023-12-06 16:34:23 -05:00
http_server_test.go
index.go Chore: Ensure BuildVersion is set when using CDN (#79169) 2023-12-06 15:27:08 -05:00
login.go Auth: Split signout_redirect_url into per provider settings (#75269) 2023-11-29 14:50:21 +01:00
login_oauth.go Auth: Remove unused Authenticator service (#73143) 2023-08-10 11:02:32 +02:00
login_oauth_test.go Auth: Remove auth broker flag and clean up login handlers (#73109) 2023-08-10 09:56:04 +02:00
login_test.go Frontend: Foundations for multi tenant frontend (#78815) 2023-12-05 08:34:22 +01:00
metrics.go FeatureToggles: Add context and and an explicit global check (#78081) 2023-11-14 12:50:27 -08:00
metrics_test.go Errors: Make errors the same in dev as prod (#77366) 2023-10-30 14:06:26 -04:00
org.go Chore: Port user services to identity.Requester (#73851) 2023-08-28 10:42:24 +02:00
org_invite.go Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
org_invite_test.go
org_test.go Access: Fetch fresh permissions for target GlobalOrgID in AuthorizeInOrgMiddleware (#76569) 2023-10-13 21:01:47 +03:00
org_users.go Chore: remove `gcomOnlyExternalOrgRoleSync` feature toggle (#78001) 2023-11-13 09:56:02 +00:00
org_users_test.go Authz: Remove use of SignedInUser copy for permission evaluation (#78448) 2023-11-22 14:20:22 +01:00
password.go
playlist.go FeatureToggles: Add context and and an explicit global check (#78081) 2023-11-14 12:50:27 -08:00
plugin_dashboards.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2023-10-06 11:34:36 +02:00
plugin_dashboards_test.go
plugin_metrics.go Chore: Refactor backend plugin errors (#74928) 2023-09-25 11:56:03 +02:00
plugin_metrics_test.go Chore: Refactor backend plugin errors (#74928) 2023-09-25 11:56:03 +02:00
plugin_proxy.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2023-10-06 11:34:36 +02:00
plugin_proxy_test.go
plugin_resource.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2023-10-06 11:34:36 +02:00
plugin_resource_test.go FeatureFlags: Cleanup usage of cfg.IsFeatureToggleEnabled (#78014) 2023-11-13 07:55:15 -08:00
plugins.go Plugins: Rename `externalServiceAuthentication` to `iam` (#78686) 2023-12-04 13:14:21 +01:00
plugins_test.go Plugins: Rename `externalServiceAuthentication` to `iam` (#78686) 2023-12-04 13:14:21 +01:00
preferences.go Teams: Move team API to own service (#76347) 2023-10-12 10:10:54 +02:00
preferences_test.go Identity: Unfurl UserID and Email in pkg/api to user identity.Requester (#76112) 2023-10-09 16:07:28 +02:00
quota.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2023-10-06 11:34:36 +02:00
quota_test.go
render.go Identity: Unfurl UserID and Email in pkg/api to user identity.Requester (#76112) 2023-10-09 16:07:28 +02:00
search.go Authz: Remove use of SignedInUser copy for permission evaluation (#78448) 2023-11-22 14:20:22 +01:00
short_url.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2023-10-06 11:34:36 +02:00
short_url_test.go
signup.go Identity: Unfurl UserID and Email in pkg/api to user identity.Requester (#76112) 2023-10-09 16:07:28 +02:00
swagger.go Swagger: Show k8s APIs (#78091) 2023-11-15 06:42:35 -08:00
swagger_responses.go PublicDashboards: Add swagger documentation (#75318) 2023-10-30 10:32:07 -03:00
swagger_tags.json Browse Dashboards: Update docs to remove reference to `General` folder (#74528) 2023-09-08 03:57:16 +01:00
user.go User: remove empty email / username check from update in service (#77347) 2023-10-30 10:44:26 +01:00
user_test.go Login: refactor auth info package (#78459) 2023-11-21 14:47:23 +01:00
user_token.go Auth: Add more context to logs around token rotation, revocation (#78600) 2023-11-23 16:48:54 +01:00
user_token_test.go
utils.go authz: Clean up acl endpoints and dashboard guardian (#73746) 2023-08-24 15:37:54 +02:00

README.md

OpenAPI specifications

Since version 8.4, HTTP API details are specified using OpenAPI v2. Starting from version 9.1, there is also an OpenAPI v3 specification (generated by the v2 one using this script).

OpenAPI annotations

The OpenAPI v2 specification is generated automatically from the annotated Go code using go-swagger which scans the source code for annotation rules. Refer to this getting started guide for getting familiar with the toolkit.

Developers modifying the HTTP API endpoints need to make sure to add the necessary annotations so that their changes are reflected into the generated specifications.

Example of endpoint annotation

The following route defines a PATCH endpoint under the /serviceaccounts/{serviceAccountId} path with tag service_accounts (used for grouping together several routes) and operation ID updateServiceAccount (used for uniquely identifying routes and associate parameters and response with them).


// swagger:route PATCH /serviceaccounts/{serviceAccountId} service_accounts updateServiceAccount
//
// # Update service account
//
// Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation):
// action: `serviceaccounts:write` scope: `serviceaccounts:id:1` (single service account)
//
// Responses:
// 200: updateServiceAccountResponse
// 400: badRequestError
// 401: unauthorisedError
// 403: forbiddenError
// 404: notFoundError
// 500: internalServerError

The go-swagger can discover such annotations by scanning any code imported by pkg/server but by convention we place the endpoint annotations above the endpoint definition.

Example of endpoint parameters

The following struct defines the route parameters for the updateServiceAccount endpoint. The route expects:

  • a path parameter denoting the service account identifier and
  • a body parameter with the new values for the specific service account

// swagger:parameters updateServiceAccount
type UpdateServiceAccountParams struct {
	// in:path
	ServiceAccountId int64 `json:"serviceAccountId"`
	// in:body
	Body serviceaccounts.UpdateServiceAccountForm
}

Example of endpoint response

The following struct defines the response for the updateServiceAccount endpoint in case of a successful 200 response.


// swagger:response updateServiceAccountResponse
type UpdateServiceAccountResponse struct {
	// in:body
	Body struct {
		Message        string                                    `json:"message"`
		ID             int64                                     `json:"id"`
		Name           string                                    `json:"name"`
		ServiceAccount *serviceaccounts.ServiceAccountProfileDTO `json:"serviceaccount"`
	}
}

OpenAPI generation

Developers can re-create the OpenAPI v2 and v3 specifications using the following command:


make swagger-clean && make openapi3-gen

They can observe its output into the public/api-merged.json and public/openapi3.json files.

Finally, they can browser and try out both the OpenAPI v2 and v3 via the Swagger UI editor (served by the grafana server) by navigating to /swagger.