OpenAPI DevTools

Dev tools

api spec generator

SHOW HN2023

811points
102comments
#12of 3,109 in 2023
Top 1%of 2023 by points

How HN took it

LovedMost comments that take a side are positive

21 positive, 33 neutral or asking, 2 mixed, 3 critical, out of 59 comments about the project. Thread score +0.35.

Idea: 14 for, 1 againstExecution: 1 for, 0 againstPrivacy: 0 for, 1 againstDesign: 1 for, 0 againstDocs: 0 for, 1 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • Useful tool for reverse-engineering web APIs

    From 4 comments
    • This is amazing! to figure out the website apis has always been a huge pita. With our dlt library project we can turn the openapi spec into pipelines and have the data pushed…
      adrianbr on HN
    • Had in mind to build something like this for quite some time to quickly explore undocumented APIs - looking forward to see your progress!
      jpmonette on HN
    • This looks super useful, can’t wait to try it at work tomorrow!
      chris_nielsen on HN
    • Amazing. I’ve often wished this would exist. Thank you. It was always my step 1 towards Xxx. Keen to know what directions you were thinking? I’d love to see more remixing on top…
      RileyJames on HN
  • Polished and well executed

    From 2 comments
    • Damn I literally built a really similar tool myself using HAR files just a couple weeks ago! Yours is way more polished though, nice work. I have a lot of ideas in this space…
      pbnjay on HN
    • Okay, this is wonderful. Love it already!! Sometimes I click on a path parameter and it doesn't "create" it, even though there are several other examples in the list. Not sure if…
      HanClinto on HN

Objections

  • Generated specs are incomplete and only reflect observed traffic

    From 1 comment
    • The problem with this type of tools is that they only produce specs based on infos they can get. The spec produced will be incomplete (missing paths, methods, response variants,…
      ushakov on HN
  • Criteria for what counts as an API request are unclear

    From 2 comments
    • The description doesn't explain exactly what this extension does. I assume it monitors all XHR requests as you browse a website, and if the request/response matches [some…
      wackget on HN
    • Yeah but my question remains: by what criteria is a request classed as an "API request"? Websites make tons of XHR requests and not all of them are API requests. I want to know…
      wackget on HN
  • Could capture session cookies or sensitive tokens

    From 1 comment
    • wow what a perfect service to steal session cookies
      yread on HN

Requests

  • Firefox support

    From 3 comments
    • Love it! I used https://vite-plugin-web-extension.aklinker1.io/guide/ before to have cross browser extension support. If you don't mind I could take a look to add firefox support…
      a_c on HN
    • I'd love to see FF support on this.
      distortedsignal on HN
    • A Firefox version of this would be super handy! Does that already exist?
      sdmike1 on HN
  • Capture and document auth headers and token flows

    From 2 comments
    • I wish this would document the auth headers. What would be particularly useful is if it saved token values and then (through search) joined them on the response of the auth call…
      the_absurdist on HN
    • This is awesome! I'll second/third the feature request for auto-including auth headers/calls (as many of the sites I'm trying to understand/use APIs from use persistent keys, and…
      ricberw on HN
  • Copy request as Python snippet

    From 1 comment
    • My most common use case here is to then want to hit the API from python, and adjust the params / url etc. Would love a "copy to python requests" button that grabs the headers…
      archiewood on HN
  • Filter out headers and handle enums and optional fields

    From 2 comments
    • Is there a way to filter out headers? The result contains headers like content-length and similar. Also it would be nice if it could factor out common schemas.
      pihentagy on HN
    • Very nice! Auto generating type information from looking at permutations of values is hard though. Q: Does this handle optional values? Also, being able to mark string field as…
      ch_sm on HN

Questions

  • Does it capture server-side requests?

    From 1 comment
    • this is very cool! I just tried using it, unfortunately, my NextJS app dir project makes most requests from the server side, so it was only capturing "posts" made from the…
      pmkelly4444 on HN
  • Does it handle gRPC or protobuf?

    From 1 comment
    • The documentation states 'automatically populate based on JSON requests that fire as you browse the web' so does this mean that gRPC protobuf are not captured?
      voidmain0001 on HN
  • Is there a Safari version?

    From 1 comment
    • Awesome! Any chance of a Safari extension too?
      corry on HN

Alternatives named

  • mitmproxy2swagger

    From 1 comment
    • This reminds me a lot of: https://github.com/alufers/mitmproxy2swagger However, having the capability delivered in a browser extension is extremely handy!
      lucasyvas on HN
  • Akita (now Postman)

    From 2 comments
    • There's a similar, more powerful tool if you're into this https://www.akitasoftware.com/
      user3939382 on HN
    • FYI, Akita was just bought by Postman: https://www.akitasoftware.com/blog-posts/announcing-akita-has-joined-postman
      digitalsanctum on HN
  • Optic

    From 1 comment
    • https://www.useoptic.com/ is another one, which is a little more tailored to building & updating OpenAPI specs. Works well on live traffic and/or tests.
      rattray on HN
  • har-to-openapi

    From 1 comment
    • Genson-js is used to merge JSON Schema objects. Essentially there are 5 schemas that we care about in each request, for request bodies, request headers, response bodies, response…
      mrmagoo2 on HN
  • curlconverter

    From 1 comment
    • Steps to do so: - open the network console - right click on the request - click "copy as curl" - visit https://curlconverter.com/ to convert to Python/Node/any language
      ea016 on HN

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/38012032)