OpenAPI DevTools
Dev tools
api spec generator
SHOW HN2023
How HN took it
21 positive, 33 neutral or asking, 2 mixed, 3 critical, out of 59 comments about the project. Thread score +0.35.
Idea: 14 for, 1 againstExecution: 1 for, 0 againstPrivacy: 0 for, 1 againstDesign: 1 for, 0 againstDocs: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful tool for reverse-engineering web APIs
From 4 comments
This is amazing! to figure out the website apis has always been a huge pita. With our dlt library project we can turn the openapi spec into pipelines and have the data pushed…
adrianbr on HNHad in mind to build something like this for quite some time to quickly explore undocumented APIs - looking forward to see your progress!
jpmonette on HNThis looks super useful, can’t wait to try it at work tomorrow!
chris_nielsen on HNAmazing. I’ve often wished this would exist. Thank you. It was always my step 1 towards Xxx. Keen to know what directions you were thinking? I’d love to see more remixing on top…
RileyJames on HN
Polished and well executed
From 2 comments
Damn I literally built a really similar tool myself using HAR files just a couple weeks ago! Yours is way more polished though, nice work. I have a lot of ideas in this space…
pbnjay on HNOkay, this is wonderful. Love it already!! Sometimes I click on a path parameter and it doesn't "create" it, even though there are several other examples in the list. Not sure if…
HanClinto on HN
Objections
Generated specs are incomplete and only reflect observed traffic
From 1 comment
The problem with this type of tools is that they only produce specs based on infos they can get. The spec produced will be incomplete (missing paths, methods, response variants,…
ushakov on HN
Criteria for what counts as an API request are unclear
From 2 comments
The description doesn't explain exactly what this extension does. I assume it monitors all XHR requests as you browse a website, and if the request/response matches [some…
wackget on HNYeah but my question remains: by what criteria is a request classed as an "API request"? Websites make tons of XHR requests and not all of them are API requests. I want to know…
wackget on HN
Could capture session cookies or sensitive tokens
From 1 comment
wow what a perfect service to steal session cookies
yread on HN
Requests
Firefox support
From 3 comments
Love it! I used https://vite-plugin-web-extension.aklinker1.io/guide/ before to have cross browser extension support. If you don't mind I could take a look to add firefox support…
a_c on HNI'd love to see FF support on this.
distortedsignal on HNA Firefox version of this would be super handy! Does that already exist?
sdmike1 on HN
Capture and document auth headers and token flows
From 2 comments
I wish this would document the auth headers. What would be particularly useful is if it saved token values and then (through search) joined them on the response of the auth call…
the_absurdist on HNThis is awesome! I'll second/third the feature request for auto-including auth headers/calls (as many of the sites I'm trying to understand/use APIs from use persistent keys, and…
ricberw on HN
Copy request as Python snippet
From 1 comment
My most common use case here is to then want to hit the API from python, and adjust the params / url etc. Would love a "copy to python requests" button that grabs the headers…
archiewood on HN
Filter out headers and handle enums and optional fields
From 2 comments
Is there a way to filter out headers? The result contains headers like content-length and similar. Also it would be nice if it could factor out common schemas.
pihentagy on HNVery nice! Auto generating type information from looking at permutations of values is hard though. Q: Does this handle optional values? Also, being able to mark string field as…
ch_sm on HN
Questions
Does it capture server-side requests?
From 1 comment
this is very cool! I just tried using it, unfortunately, my NextJS app dir project makes most requests from the server side, so it was only capturing "posts" made from the…
pmkelly4444 on HN
Does it handle gRPC or protobuf?
From 1 comment
The documentation states 'automatically populate based on JSON requests that fire as you browse the web' so does this mean that gRPC protobuf are not captured?
voidmain0001 on HN
Is there a Safari version?
From 1 comment
Awesome! Any chance of a Safari extension too?
corry on HN
Alternatives named
mitmproxy2swagger
From 1 comment
This reminds me a lot of: https://github.com/alufers/mitmproxy2swagger However, having the capability delivered in a browser extension is extremely handy!
lucasyvas on HN
Akita (now Postman)
From 2 comments
There's a similar, more powerful tool if you're into this https://www.akitasoftware.com/
user3939382 on HNFYI, Akita was just bought by Postman: https://www.akitasoftware.com/blog-posts/announcing-akita-has-joined-postman
digitalsanctum on HN
Optic
From 1 comment
https://www.useoptic.com/ is another one, which is a little more tailored to building & updating OpenAPI specs. Works well on live traffic and/or tests.
rattray on HN
har-to-openapi
From 1 comment
Genson-js is used to merge JSON Schema objects. Essentially there are 5 schemas that we care about in each request, for request bodies, request headers, response bodies, response…
mrmagoo2 on HN
curlconverter
From 1 comment
Steps to do so: - open the network console - right click on the request - click "copy as curl" - visit https://curlconverter.com/ to convert to Python/Node/any language
ea016 on HN