
Product
Introducing Repository Access Permissions and Custom Roles
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.
yapi-plugin-gitlab
Advanced tools
yapi gitlab(支持gitlab 10.0.0以上)集成插件,配置方法如下:
提供gitlab oauth2登录
提供项目创建接口,配置gitlab的system hooks,可同步生成工程。
提供yapi与gitlab分组成员同步接口
提供yapi与gitlab项目成员同步接口
第一步:在gitlab中配置oauth2, 生成appId、secret。

第二步:在gitlab中配置access-token

第三部:在gilab中配置回调函数

第四步:在生成的配置文件config.json中加入如下配置
"plugins": [{
"name": "gitlab",
"options": {
"host" : "http://gitlab.example.com:port",
"redirectUri" : "http://yapi.example.com:3000/api/plugin/oauth2/callback",
"appId" : "xxxxxxxxxxxxxxxxxx",
"appSecret" : "xxxxxxxxxxxxxxxxxxxxxx",
"accessToken": "xxxxxxxxxxxxxxxxxxxxxxxx",
"loginPath": "/api/v4/user",
"authPath" : "/oauth/authorize",
"tokenPath" : "/oauth/token",
"emailKey" : "email",
"userKey" : "username",
"emailPostfix" : "@yapi.com"
}
}]
配置含义如下:
host gitlab部署地址redirectUri oauth2回调地址appId 第一步中gitlab生成的Application IDappSecret 第一步中gitlab生成的SecretloginPath、authPath、tokenPath oauth2基本配置(一般无需修改,直接复制)emailKey gitlab用户信息邮箱关键字userKey gitlab用户信息用户名关键字emailPostfix 如果gitlab用户没有邮箱信息在yapi中,已gitlab用户名+该后缀作为邮箱地址


FAQs
devops with gitlab for yapi
The npm package yapi-plugin-gitlab receives a total of 7 weekly downloads. As such, yapi-plugin-gitlab popularity was classified as not popular.
We found that yapi-plugin-gitlab demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.