
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Easy type-aware mixing of APIs from TypeScript client libraries generated by openapi-generator.
pnpm add oasin
Use mixModuleApis
when you need to access to every API client available in the library.
Actual syntax will differ based on the generator being used, as each one structures exports differently. Examples:
typescript-fetch
import { mixModuleApis } from 'oasin';
import * as PetStoreAPI from '<your-client-lib>';
export class PetStoreClient extends mixModuleApis(PetStoreAPI, PetStoreAPI.BaseAPI) {
/** ... */
}
For fine-grained control over what is being mixed, you can use combineMixins
to provide a subset of your client library's APIs:
import { combineMixins } from 'oasin';
import { PetApi, StoreApi, BaseAPI } from '<your-client-lib>';
export class PetStoreClient extends combineMixins([PetApi, StoreApi], BaseAPI) {}
typescript-axios
When clients are generated using typescript-axios
, top-level exports don't include the BaseAPI
class. It has to be imported separately:
import { mixModuleApis } from 'oasin';
import { BaseAPI } from '<your-client-lib>/base';
import * as PetStoreAPI from '<your-client-lib>';
export class PetStoreClient extends mixModuleApis(PetStoreAPI, BaseAPI) {
/** ... */
}
When combining a list of API classes, later sources' methods overwrite earlier ones if they have the same key.
Normally, this is not an issue - just follow the spec by enforcing unique operation IDs:
Unique string used to identify the operation. The id MUST be unique among all operations described in the API. The operationId value is case-sensitive. Tools and libraries MAY use the operationId to uniquely identify an operation, therefore, it is RECOMMENDED to follow common programming naming conventions.
The returned class will only support one configuration. Only API clients with an identical configuration (base URL, signing requests etc.) should be combined.
For multiple configurations, consider building a facade which exposes an entire group of independent client instances.
Autoloading a library as a single client won't be supported in the near future. TypeScript currently lacks support for inferring dynamic import types when the import path is a parameter, even if it is typed as a string literal.
FAQs
Mixin that combines generated clients for OAS into a single class
We found that oasin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.