The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
grafana/pkg/api
linoman 824e0f9ce8
Plugins: Display plugin permissions required (#78355)
1 year ago
..
apierrors Alerting: Fix deleting rules in a folder with matching UID in another organization (#78258) 2 years ago
avatar Chore: Fix goimports grouping in pkg/api (#62419) 2 years ago
datasource mssql: prepare logs-handling for decouple-datasource changes (#79214) 1 year ago
dtos Plugins: Display plugin permissions required (#78355) 1 year ago
frontendlogging Chore: use any rather than interface{} (#74066) 2 years ago
pluginproxy FeatureToggles: Add context and and an explicit global check (#78081) 2 years ago
response Errors: Make errors the same in dev as prod (#77366) 2 years ago
routing Chore: Move ReqContext to contexthandler service (#62102) 2 years ago
static API: Extract OpenAPI specification from source code using go-swagger (#40528) 3 years ago
webassets Frontend: Foundations for multi tenant frontend (#78815) 1 year ago
README.md Swagger: Show k8s APIs (#78091) 2 years ago
accesscontrol.go RBAC: change annotation scopes back (#79330) 1 year ago
admin.go Anonymous: Add device limits to stats (#79494) 1 year ago
admin_encryption.go Config: Add configuration option to define custom user-facing general error message for certain error types (#70023) 2 years ago
admin_provisioning.go Chore: Move ReqContext to contexthandler service (#62102) 2 years ago
admin_provisioning_test.go RBAC: Rewrite provisioning rbac tests (#61752) 2 years ago
admin_test.go Auth: Add anonymous users view and stats (#78685) 2 years ago
admin_users.go Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) 1 year ago
admin_users_test.go Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) 1 year ago
alerting.go Authz: Remove use of SignedInUser copy for permission evaluation (#78448) 2 years ago
annotations.go Annotations: Remove dashboard permission checks for annotations (#78352) 2 years ago
annotations_test.go Annotations: Remove dashboard permission checks for annotations (#78352) 2 years ago
api.go PublicDashboards: Add setting to disable the feature (#78894) 1 year ago
apikey.go Chore: Port user services to identity.Requester (#73851) 2 years ago
basic_auth.go Macaron: remove custom Request type (#37874) 4 years ago
basic_auth_test.go Macaron: remove custom Request type (#37874) 4 years ago
common_test.go Auth: Split signout_redirect_url into per provider settings (#75269) 2 years ago
dashboard.go PublicDashboards: Add setting to disable the feature (#78894) 1 year ago
dashboard_permission.go Authz: Remove use of SignedInUser copy for permission evaluation (#78448) 2 years ago
dashboard_permission_test.go authz: Clean up acl endpoints and dashboard guardian (#73746) 2 years ago
dashboard_snapshot.go Identity: Unfurl UserID and Email in pkg/api to user identity.Requester (#76112) 2 years ago
dashboard_snapshot_test.go Authz: fix snapshot tests legacy guardian (#73823) 2 years ago
dashboard_test.go Remove deprecated FolderID from api tests (#79466) 1 year ago
dataproxy.go Chore: use any rather than interface{} (#74066) 2 years ago
datasources.go Team LBAC: Limit access to data source (#78376) 1 year ago
datasources_test.go Team LBAC: Limit access to data source (#78376) 1 year ago
fakes.go Plugins: Make renderer service load renderer plugin (#77854) 1 year ago
featuremgmt.go Feature Toggles: Remove use of boolPtr in FeatureFlag struct (#79550) 1 year ago
featuremgmt_test.go Feature Toggles: Remove use of boolPtr in FeatureFlag struct (#79550) 1 year ago
folder.go Fix capitalising Folder structs (#79207) 1 year ago
folder_bench_test.go Remove deprecated FolderID from api tests (#79466) 1 year ago
folder_permission.go Authz: Remove use of SignedInUser copy for permission evaluation (#78448) 2 years ago
folder_permission_test.go Remove deprecated FolderID from api tests (#79466) 1 year ago
folder_test.go Remove deprecated FolderID from api tests (#79466) 1 year ago
frontend_logging.go Plugins: Add context to StaticRouteResolver and ErrorResolver interfaces (#73121) 2 years ago
frontend_logging_test.go Chore: use any rather than interface{} (#74066) 2 years ago
frontend_metrics.go Chore: Move ReqContext to contexthandler service (#62102) 2 years ago
frontendsettings.go PublicDashboards: Add setting to disable the feature (#78894) 1 year ago
frontendsettings_test.go Plugins: Make renderer service load renderer plugin (#77854) 1 year ago
grafana_com_proxy.go API: don't re-add /api suffix to grafana.com API URL (#62280) 2 years ago
health.go Chore: Remove Store interface and use db.DB instead (#60160) 2 years ago
health_test.go HealthCheck: show enterprise commit (#75242) 2 years ago
http_server.go K8s: Refactor metrics to share k8s registry (#79106) 1 year ago
http_server_test.go Chore: Fix goimports grouping in pkg/api (#62419) 2 years ago
index.go Analytics: Return empty analytic settings for users that are not signed in (#79515) 1 year ago
login.go Authn: Handle logout logic in auth broker (#79635) 1 year ago
login_oauth.go Auth: Remove unused Authenticator service (#73143) 2 years ago
login_oauth_test.go Auth: Remove auth broker flag and clean up login handlers (#73109) 2 years ago
login_test.go Frontend: Foundations for multi tenant frontend (#78815) 1 year ago
metrics.go FeatureToggles: Add context and and an explicit global check (#78081) 2 years ago
metrics_test.go Errors: Make errors the same in dev as prod (#77366) 2 years ago
org.go Chore: Port user services to identity.Requester (#73851) 2 years ago
org_invite.go Chore: use any rather than interface{} (#74066) 2 years ago
org_invite_test.go Chore: Fix goimports grouping in pkg/api (#62419) 2 years ago
org_test.go Access: Fetch fresh permissions for target GlobalOrgID in AuthorizeInOrgMiddleware (#76569) 2 years ago
org_users.go Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) 1 year ago
org_users_test.go Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) 1 year ago
password.go Chore: Remove result fields from login (#65136) 2 years ago
playlist.go K8s: Add resource type helper to avoid so many hardcoded names (#79344) 1 year ago
plugin_checks.go Chore: Evaluate if an app is disabled for API requests (#79564) 1 year ago
plugin_checks_test.go Chore: Evaluate if an app is disabled for API requests (#79564) 1 year ago
plugin_dashboards.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2 years ago
plugin_dashboards_test.go Chore: Evaluate if an app is disabled for API requests (#79564) 1 year ago
plugin_metrics.go Chore: Refactor backend plugin errors (#74928) 2 years ago
plugin_metrics_test.go Chore: Refactor backend plugin errors (#74928) 2 years ago
plugin_proxy.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2 years ago
plugin_proxy_test.go Plugins: Handle app plugin proxy routes per request (#51835) 3 years ago
plugin_resource.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2 years ago
plugin_resource_test.go Plugins: Add Grafana config to app plugin context (#79439) 1 year ago
plugins.go Plugins: Display plugin permissions required (#78355) 1 year ago
plugins_test.go Plugins: Rename `externalServiceAuthentication` to `iam` (#78686) 2 years ago
preferences.go Teams: Move team API to own service (#76347) 2 years ago
preferences_test.go Identity: Unfurl UserID and Email in pkg/api to user identity.Requester (#76112) 2 years ago
quota.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2 years ago
quota_test.go MESA: Allow using synced permissions (#71377) 2 years ago
render.go Export: Remove no-store headers in pdf and image previews (#78844) 1 year ago
search.go Authz: Remove use of SignedInUser copy for permission evaluation (#78448) 2 years ago
short_url.go Auth: Unfurl OrgID in pkg/api to allow using identity.Requester interface (#76108) 2 years ago
short_url_test.go Chore: Fix goimports grouping in pkg/api (#62419) 2 years ago
signup.go Identity: Unfurl UserID and Email in pkg/api to user identity.Requester (#76112) 2 years ago
swagger.go Swagger: Show k8s APIs (#78091) 2 years ago
swagger_responses.go PublicDashboards: Add swagger documentation (#75318) 2 years ago
swagger_tags.json Browse Dashboards: Update docs to remove reference to `General` folder (#74528) 2 years ago
user.go Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) 1 year ago
user_test.go Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) 1 year ago
user_token.go Auth: Add more context to logs around token rotation, revocation (#78600) 2 years ago
user_token_test.go AuthToken: client token rotation fix (#65709) 2 years ago
utils.go authz: Clean up acl endpoints and dashboard guardian (#73746) 2 years ago

README.md

OpenAPI specifications

Since version 8.4, HTTP API details are specified using OpenAPI v2. Starting from version 9.1, there is also an OpenAPI v3 specification (generated by the v2 one using this script).

OpenAPI annotations

The OpenAPI v2 specification is generated automatically from the annotated Go code using go-swagger which scans the source code for annotation rules. Refer to this getting started guide for getting familiar with the toolkit.

Developers modifying the HTTP API endpoints need to make sure to add the necessary annotations so that their changes are reflected into the generated specifications.

Example of endpoint annotation

The following route defines a PATCH endpoint under the /serviceaccounts/{serviceAccountId} path with tag service_accounts (used for grouping together several routes) and operation ID updateServiceAccount (used for uniquely identifying routes and associate parameters and response with them).


// swagger:route PATCH /serviceaccounts/{serviceAccountId} service_accounts updateServiceAccount
//
// # Update service account
//
// Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation):
// action: `serviceaccounts:write` scope: `serviceaccounts:id:1` (single service account)
//
// Responses:
// 200: updateServiceAccountResponse
// 400: badRequestError
// 401: unauthorisedError
// 403: forbiddenError
// 404: notFoundError
// 500: internalServerError

The go-swagger can discover such annotations by scanning any code imported by pkg/server but by convention we place the endpoint annotations above the endpoint definition.

Example of endpoint parameters

The following struct defines the route parameters for the updateServiceAccount endpoint. The route expects:

  • a path parameter denoting the service account identifier and
  • a body parameter with the new values for the specific service account

// swagger:parameters updateServiceAccount
type UpdateServiceAccountParams struct {
	// in:path
	ServiceAccountId int64 `json:"serviceAccountId"`
	// in:body
	Body serviceaccounts.UpdateServiceAccountForm
}

Example of endpoint response

The following struct defines the response for the updateServiceAccount endpoint in case of a successful 200 response.


// swagger:response updateServiceAccountResponse
type UpdateServiceAccountResponse struct {
	// in:body
	Body struct {
		Message        string                                    `json:"message"`
		ID             int64                                     `json:"id"`
		Name           string                                    `json:"name"`
		ServiceAccount *serviceaccounts.ServiceAccountProfileDTO `json:"serviceaccount"`
	}
}

OpenAPI generation

Developers can re-create the OpenAPI v2 and v3 specifications using the following command:


make swagger-clean && make openapi3-gen

They can observe its output into the public/api-merged.json and public/openapi3.json files.

Finally, they can browser and try out both the OpenAPI v2 and v3 via the Swagger UI editor (served by the grafana server) by navigating to /swagger.