GrapeSwaggerRails
Swagger UI as Rails Engine for grape-swagger gem.
Installation
Add this line to your application's Gemfile:
gem 'grape-swagger-rails'
And then execute:
$ bundle
Or install it yourself as:
$ gem install grape-swagger-rails
Compatibility
GrapeSwaggerRails is compatible with the following versions of grape and grape-swagger.
| grape | grape-swagger |
|---|---|
| 0.9.0 | 0.8.0 |
| 0.10.0 | 0.9.0 |
| 0.16.2 | 0.20.2 |
Usage
Add this line to ./config/routes.rb:
mount GrapeSwaggerRails::Engine => '/swagger'
Create an initializer (e.g. ./config/initializers/swagger.rb) and specify the URL to your Swagger API schema and app:
GrapeSwaggerRails..url = '/swagger_doc.json'
GrapeSwaggerRails..app_url = 'http://swagger.wordnik.com'
You can dynamically set app_url for each request use a before_action:
GrapeSwaggerRails..before_action do
GrapeSwaggerRails..app_url = request.protocol + request.host_with_port
end
You can set the app name, default is "Swagger".
GrapeSwaggerRails..app_name = 'Swagger'
You can specify additional headers to add to each request:
GrapeSwaggerRails..headers['Special-Header'] = 'Some Secret Value'
You can set docExpansion with "none" or "list" or "full", default is "none". See the official Swagger-UI documentation about SwaggerUi Parameters.
GrapeSwaggerRails..doc_expansion = 'list'
You can set supportedSubmitMethods with an array of the supported HTTP methods, default is %w{ get post put delete patch }.
See the official Swagger-UI documentation about SwaggerUi Parameters.
GrapeSwaggerRails..supported_submit_methods = ["get"]
You can set validatorUrl to your own locally deployed Swagger validator, or disable validation by setting this option to nil. This is useful to avoid error messages when running Swagger-UI on a server which is not accessible from outside your network.
GrapeSwaggerRails..validator_url = nil
Using the headers option above, you could hard-code Basic Authentication credentials.
Alternatively, you can configure Basic Authentication through the UI, as described below.
Basic Authentication
If your application uses Basic Authentication, you can setup Swagger to send the username and password to the server with each request to your API:
GrapeSwaggerRails..api_auth = 'basic' # Or 'bearer' for OAuth
GrapeSwaggerRails..api_key_name = 'Authorization'
GrapeSwaggerRails..api_key_type = 'header'
Now you can specify the username and password to your API in the Swagger "API key" field by concatenating the values like this:
username:password
The javascript that loads on the Swagger page automatically encodes the username and password and adds the authorization header to your API request. See the official Swagger documentation about Custom Header Parameters
Pre-fill Authentication
If you will know the Authentication key prior to page load or you wish to set it for debug purposes, you can setup so that the api_key field is pre-filled on page load:
GrapeSwaggerRails..api_key_default_value = 'your_default_value'
To set it based on the current_user or other request-based parameters, try using it inside of your before_action (See Swagger UI Authorization)
API Token Authentication
If your application uses token authentication passed as a query param, you can setup Swagger to send the API token along with each request to your API:
GrapeSwaggerRails..api_key_name = 'api_token'
GrapeSwaggerRails..api_key_type = 'query'
If your application used token authentication passed as a header, like Rails does (authenticate_or_request_with_http_token), you can configure Swagger to send the token in this form:
Authorization: Token token="WCZZYjnOQFUYfJIN2ShH1iD24UHo58A6TI"
by specify:
GrapeSwaggerRails..api_auth = 'token'
GrapeSwaggerRails..api_key_name = 'Authorization'
GrapeSwaggerRails..api_key_type = 'header'
You can use the api_key input box to fill in your API token.
Swagger UI Authorization
You may want to authenticate users before displaying the Swagger UI, particularly when the API is protected by Basic Authentication.
Use the before option to inspect the request before Swagger UI:
GrapeSwaggerRails..before_action do |request|
# 1. Inspect the `request` or access the Swagger UI controller via `self`.
# 2. Check `current_user` or `can? :access, :api`, etc.
# 3. Redirect or error in case of failure.
end
Integration with DoorKeeper
Add the following code to the initializer (swagger.rb):
GrapeSwaggerRails..before_action do |request|
GrapeSwaggerRails..api_key_default_value = current_user.token.token
end
In your User model (user.rb) add:
has_one :token, -> { order 'created_at DESC' }, class_name: Doorkeeper::AccessToken, foreign_key: :resource_owner_id
Hiding the API or Authorization text boxes
If you know in advance that you would like to prevent changing the Swagger API URL, you can hide it using the following:
GrapeSwaggerRails..hide_url_input = true
Similarly, you can hide the Authentication input box by adding this:
GrapeSwaggerRails..hide_api_key_input = true
By default, these options are false.
Updating Swagger UI from Dist
To update Swagger UI from its distribution, run bundle exec rake swagger_ui:dist:update. Examine the changes carefully.
NOTE: This action should be run part of this gem (not your application). In case if you want to make it up-to-date, clone the repo, run the rake task, examine the diff, fix any bugs, make sure tests pass and then send PR here.
Enabling in a Rails-API Project
The grape-swagger-rails gem uses the Rails asset pipeline for its Javascript and CSS. Enable the asset pipeline with rails-api.
Add sprockets to config/application.rb.
require 'sprockets/railtie'
Include JavaScript in app/assets/javascripts/application.js.
//
//= require_tree .
Include CSS stylesheets in app/assets/stylesheets/application.css.
/*
*= require_tree .
*/
Contributors
Contributing
See CONTRIBUTING.
License
MIT License, see LICENSE.