Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
gici-swagger-ui-express
Advanced tools
Adds middleware to your express app to serve the Swagger UI bound to your Swagger document. This acts as living documentation for your API hosted from within your app.
based on swagger-ui-express
In app's package.json
"gici-swagger-ui-express": "latest" // or desired version
Express setup app.js
const express = require('express');
const app = express();
const swaggerUi = require('gici-swagger-ui-express');
const swaggerDocument = require('./swagger.json');
app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(swaggerDocument));
Open http://<app_host>
:<app_port>
/api-docs in your browser to view the documentation.
If you want to set up routing based on the swagger document checkout swagger-express-router
If you are using swagger-jsdoc simply pass the swaggerSpec into the setup function:
// Initialize swagger-jsdoc -> returns validated swagger spec in json format
const swaggerSpec = swaggerJSDoc(options);
app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(swaggerSpec));
By default the Swagger Explorer bar is hidden, to display it pass true as the 'explorer' property of the options to the setup function:
const express = require('express');
const app = express();
const swaggerUi = require('gici-swagger-ui-express');
const swaggerDocument = require('./swagger.json');
var options = {
explorer : true
};
app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(swaggerDocument, options));
To pass custom options e.g. validatorUrl, to the SwaggerUi client pass an object as the 'swaggerOptions' property of the options to the setup function:
const express = require('express');
const app = express();
const swaggerUi = require('gici-swagger-ui-express');
const swaggerDocument = require('./swagger.json');
var options = {
swaggerOptions: {
validatorUrl : null
}
};
app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(swaggerDocument, options));
To customize the style of the swagger page, you can pass custom CSS as the 'customCss' property of the options to the setup function.
E.g. to hide the swagger header:
const express = require('express');
const app = express();
const swaggerUi = require('gici-swagger-ui-express');
const swaggerDocument = require('./swagger.json');
var options = {
customCss: '#header { display: none }'
};
app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(swaggerDocument, options));
If you would like to have full control over your HTML you can provide your own javascript file, value accepts absolute or relative path
const express = require('express');
const app = express();
const swaggerUi = require('gici-swagger-ui-express');
const swaggerDocument = require('./swagger.json');
var options = {
customJs: '/custom.js'
};
app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(swaggerDocument, options));
To load your swagger from a url instead of injecting the document, pass null
as the first parameter, and pass the relative or absolute URL as the 'swaggerUrl' property of the options to the setup function.
const express = require('express');
const app = express();
const swaggerUi = require('gici-swagger-ui-express');
const swaggerDocument = require('./swagger.json');
var options = {
swaggerUrl: 'http://petstore.swagger.io/v2/swagger.json'
}
app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(null, options));
To load your swagger specification yaml file you need to use a module able to convert yaml to json ; for instance yamljs
.
npm install --save yamljs
const express = require('express');
const app = express();
const swaggerUi = require('gici-swagger-ui-express');
const YAML = require('yamljs');
const swaggerDocument = YAML.load('./swagger.yaml');
app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(swaggerDocument));
Install phantom npm install npm test
FAQs
Swagger UI Express
The npm package gici-swagger-ui-express receives a total of 1 weekly downloads. As such, gici-swagger-ui-express popularity was classified as not popular.
We found that gici-swagger-ui-express demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.