Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
openapi-ts-json-schema
Advanced tools
Generate TypeScript JSON schema files (.ts
modules with as const
assertions) from OpenAPI definitions.
TypeScript JSON schemas can be used for:
json-schema-to-ts
)Given an OpenAPI definition file, openapi-ts-json-schema
will:
$ref
s and dereference them with @apidevtools/json-schema-ref-parser
$ref
s@openapi-contrib/openapi-schema-to-json-schema
and openapi-jsonschema-parameters
.ts
files with as const
assertion)TypeScript JSON schemas are 100% valid JSON schemas.
npm i openapi-ts-json-schema -D
Generate your TypeScript JSON schemas:
import { openapiToTsJsonSchema } from 'openapi-ts-json-schema';
const { outputPath } = await openapiToTsJsonSchema({
openApiSchema: 'path/to/open-api-specs.yaml',
definitionPathsToGenerateFrom: ['paths', 'components.schemas'],
});
...and use them in your TS project:
import Ajv from 'ajv';
import type { FromSchema } from 'json-schema-to-ts';
import mySchema from 'path/to/generated/schemas/MyModel.ts';
const ajv = new Ajv();
// Perform data validation and type inference using the same schema
const validate = ajv.compile<FromSchema<typeof mySchema>>(mySchema);
const data: unknown = {};
if (validate(data)) {
// data gets type inference
console.log(data.foo);
} else {
console.log(validate.errors);
}
Property | Type | Description | Default |
---|---|---|---|
openApiSchema (required) | string | Path to the OpenApi file (supports yaml and json). | - |
definitionPathsToGenerateFrom (required) | string[] | OpenApi definition object paths to generate the JSON schemas from. Only matching paths will be generated. (Supports dot notation: ["components.schemas"] ). | - |
refHandling | "import" | "inline" | "keep" | "import" : generate and import $ref schemas."inline" : inline $ref schemas."keep" : keep $ref values. | "import" |
schemaPatcher | (params: { schema: JSONSchema }) => void | Dynamically patch generated JSON schemas. The provided function will be invoked against every single JSON schema node. | - |
outputPath | string | Path where the generated schemas will be saved. Defaults to /schemas-autogenerated in same directory as provided openApiSchema . | - |
plugins | ReturnType<Plugin>[] | A set of optional plugin to generate any extra custom. See plugins docs. output. | - |
silent | boolean | Don't console.log user messages. | false |
Take a look at the Developer's notes for a few more in-depth explanations.
$ref
s handlingopenapi-ts-json-schema
provides 3 different strategies to handle OpenApi $ref
properties configurable via the refHandling
option:
import
: $ref
values get replaced with a local variable pointing to module of the generated target definitioninline
: $ref
values get recursively replaced with inline copies of the target definition. This produces self-contained standalone schemas with usually repeated inline definitionskeep
: $ref
values get preserved.$ref
sCircular $ref
s can be technically resolved with "inline" and "import" refHandling
option ("keep" doesn't resolve them by definition).
"inline" option replaces nested circular references with a {}
.
"import" option fully resolves the tree but TS engine will interrupt type recursion and type the schema as any
(error ts(7022)
). See relevant tests.
Beside generating the expected schema files under outputPath
, openapiToTsJsonSchema
returns the following data:
{
// The path where the schemas are generated
outputPath: string;
metaData: {
// Meta data of the generated schemas
schemas: Map<
// OpenAPI ref. Eg: "#/components/schemas/MySchema"
string,
{
schemaId: string;
// JSON schema Compound Schema Document `$id`. Eg: `"/components/schemas/MySchema"`
schemaFileName: string;
// Valid filename for given schema (without extension). Eg: `"MySchema"`
schemaAbsoluteDirName: string;
// Absolute path pointing to schema folder. Eg: `"/output/path/components/schemas"`
schemaAbsolutePath: string;
// Absolute path pointing to schema file. Eg: `"/output/path/components/schemas/MySchema.ts"`
schemaAbsoluteImportPath: string;
// Absolute import path (without extension). Eg: `"/output/path/components/schemas/MySchema"`
schemaUniqueName: string;
// Unique JavaScript identifier used as import name. Eg: `"componentsSchemasMySchema"`
schema: JSONSchema | string;
// JSON schema value with $refs replaced by a placeholder
isRef: boolean;
// True if schemas is used as a `$ref`
}
>;
}
}
Plugins are intended as a way to generate extra artifacts based on the same internal metadata created to generate the JSON schema output.
openapi-ts-json-schema
currently ships with one plugin specifically designed to better integrate with Fastify, but you can write your own!
Read plugins documentation 📖.
definitionPathsToGenerateFrom
option in favour of exporting the whole OpenAPI definitions based on the structure defined in specs#ref
s handlingFAQs
OpenAPI to JSON schema generator with TypeScript in mind
The npm package openapi-ts-json-schema receives a total of 1,054 weekly downloads. As such, openapi-ts-json-schema popularity was classified as popular.
We found that openapi-ts-json-schema demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.