mirror of
https://github.com/encode/django-rest-framework.git
synced 2024-11-28 12:34:00 +03:00
b87699c034
* Update schema generation doc & add deprecation notice #8453 * Update docs/topics/documenting-your-api.md Co-authored-by: Tom Christie <tom@tomchristie.com> * Update docs/topics/documenting-your-api.md Co-authored-by: Tom Christie <tom@tomchristie.com> * Update docs/topics/documenting-your-api.md Co-authored-by: Tom Christie <tom@tomchristie.com> Co-authored-by: T. Franzel <13507857+tfranzel@users.noreply.github.com> Co-authored-by: Asif Saif Uddin <auvipy@gmail.com> Co-authored-by: Tom Christie <tom@tomchristie.com>
459 lines
16 KiB
Markdown
459 lines
16 KiB
Markdown
---
|
|
source:
|
|
- schemas
|
|
---
|
|
|
|
# Schema
|
|
|
|
> A machine-readable [schema] describes what resources are available via the API, what their URLs are, how they are represented and what operations they support.
|
|
>
|
|
> — Heroku, [JSON Schema for the Heroku Platform API][cite]
|
|
|
|
---
|
|
|
|
**Deprecation notice:**
|
|
|
|
REST framework's built-in support for generating OpenAPI schemas is
|
|
**deprecated** in favor of 3rd party packages that can provide this
|
|
functionality instead. The built-in support will be moved into a separate
|
|
package and then subsequently retired over the next releases.
|
|
|
|
As a full-fledged replacement, we recommend the [drf-spectacular] package.
|
|
It has extensive support for generating OpenAPI 3 schemas from
|
|
REST framework APIs, with both automatic and customisable options available.
|
|
For further information please refer to
|
|
[Documenting your API](../topics/documenting-your-api.md#drf-spectacular).
|
|
|
|
---
|
|
|
|
API schemas are a useful tool that allow for a range of use cases, including
|
|
generating reference documentation, or driving dynamic client libraries that
|
|
can interact with your API.
|
|
|
|
Django REST Framework provides support for automatic generation of
|
|
[OpenAPI][openapi] schemas.
|
|
|
|
## Overview
|
|
|
|
Schema generation has several moving parts. It's worth having an overview:
|
|
|
|
* `SchemaGenerator` is a top-level class that is responsible for walking your
|
|
configured URL patterns, finding `APIView` subclasses, enquiring for their
|
|
schema representation, and compiling the final schema object.
|
|
* `AutoSchema` encapsulates all the details necessary for per-view schema
|
|
introspection. Is attached to each view via the `schema` attribute. You
|
|
subclass `AutoSchema` in order to customize your schema.
|
|
* The `generateschema` management command allows you to generate a static schema
|
|
offline.
|
|
* Alternatively, you can route `SchemaView` to dynamically generate and serve
|
|
your schema.
|
|
* `settings.DEFAULT_SCHEMA_CLASS` allows you to specify an `AutoSchema`
|
|
subclass to serve as your project's default.
|
|
|
|
The following sections explain more.
|
|
|
|
## Generating an OpenAPI Schema
|
|
|
|
### Install dependencies
|
|
|
|
pip install pyyaml uritemplate
|
|
|
|
* `pyyaml` is used to generate schema into YAML-based OpenAPI format.
|
|
* `uritemplate` is used internally to get parameters in path.
|
|
|
|
### Generating a static schema with the `generateschema` management command
|
|
|
|
If your schema is static, you can use the `generateschema` management command:
|
|
|
|
```bash
|
|
./manage.py generateschema --file openapi-schema.yml
|
|
```
|
|
|
|
Once you've generated a schema in this way you can annotate it with any
|
|
additional information that cannot be automatically inferred by the schema
|
|
generator.
|
|
|
|
You might want to check your API schema into version control and update it
|
|
with each new release, or serve the API schema from your site's static media.
|
|
|
|
### Generating a dynamic schema with `SchemaView`
|
|
|
|
If you require a dynamic schema, because foreign key choices depend on database
|
|
values, for example, you can route a `SchemaView` that will generate and serve
|
|
your schema on demand.
|
|
|
|
To route a `SchemaView`, use the `get_schema_view()` helper.
|
|
|
|
In `urls.py`:
|
|
|
|
```python
|
|
from rest_framework.schemas import get_schema_view
|
|
|
|
urlpatterns = [
|
|
# ...
|
|
# Use the `get_schema_view()` helper to add a `SchemaView` to project URLs.
|
|
# * `title` and `description` parameters are passed to `SchemaGenerator`.
|
|
# * Provide view name for use with `reverse()`.
|
|
path('openapi', get_schema_view(
|
|
title="Your Project",
|
|
description="API for all things …",
|
|
version="1.0.0"
|
|
), name='openapi-schema'),
|
|
# ...
|
|
]
|
|
```
|
|
|
|
#### `get_schema_view()`
|
|
|
|
The `get_schema_view()` helper takes the following keyword arguments:
|
|
|
|
* `title`: May be used to provide a descriptive title for the schema definition.
|
|
* `description`: Longer descriptive text.
|
|
* `version`: The version of the API.
|
|
* `url`: May be used to pass a canonical base URL for the schema.
|
|
|
|
schema_view = get_schema_view(
|
|
title='Server Monitoring API',
|
|
url='https://www.example.org/api/'
|
|
)
|
|
|
|
* `urlconf`: A string representing the import path to the URL conf that you want
|
|
to generate an API schema for. This defaults to the value of Django's
|
|
`ROOT_URLCONF` setting.
|
|
|
|
schema_view = get_schema_view(
|
|
title='Server Monitoring API',
|
|
url='https://www.example.org/api/',
|
|
urlconf='myproject.urls'
|
|
)
|
|
|
|
* `patterns`: List of url patterns to limit the schema introspection to. If you
|
|
only want the `myproject.api` urls to be exposed in the schema:
|
|
|
|
schema_url_patterns = [
|
|
path('api/', include('myproject.api.urls')),
|
|
]
|
|
|
|
schema_view = get_schema_view(
|
|
title='Server Monitoring API',
|
|
url='https://www.example.org/api/',
|
|
patterns=schema_url_patterns,
|
|
)
|
|
* `public`: May be used to specify if schema should bypass views permissions. Default to False
|
|
|
|
* `generator_class`: May be used to specify a `SchemaGenerator` subclass to be
|
|
passed to the `SchemaView`.
|
|
* `authentication_classes`: May be used to specify the list of authentication
|
|
classes that will apply to the schema endpoint. Defaults to
|
|
`settings.DEFAULT_AUTHENTICATION_CLASSES`
|
|
* `permission_classes`: May be used to specify the list of permission classes
|
|
that will apply to the schema endpoint. Defaults to
|
|
`settings.DEFAULT_PERMISSION_CLASSES`.
|
|
* `renderer_classes`: May be used to pass the set of renderer classes that can
|
|
be used to render the API root endpoint.
|
|
|
|
|
|
## SchemaGenerator
|
|
|
|
**Schema-level customization**
|
|
|
|
```python
|
|
from rest_framework.schemas.openapi import SchemaGenerator
|
|
```
|
|
|
|
`SchemaGenerator` is a class that walks a list of routed URL patterns, requests
|
|
the schema for each view and collates the resulting OpenAPI schema.
|
|
|
|
Typically you won't need to instantiate `SchemaGenerator` yourself, but you can
|
|
do so like so:
|
|
|
|
generator = SchemaGenerator(title='Stock Prices API')
|
|
|
|
Arguments:
|
|
|
|
* `title` **required**: The name of the API.
|
|
* `description`: Longer descriptive text.
|
|
* `version`: The version of the API. Defaults to `0.1.0`.
|
|
* `url`: The root URL of the API schema. This option is not required unless the schema is included under path prefix.
|
|
* `patterns`: A list of URLs to inspect when generating the schema. Defaults to the project's URL conf.
|
|
* `urlconf`: A URL conf module name to use when generating the schema. Defaults to `settings.ROOT_URLCONF`.
|
|
|
|
In order to customize the top-level schema, subclass
|
|
`rest_framework.schemas.openapi.SchemaGenerator` and provide your subclass
|
|
as an argument to the `generateschema` command or `get_schema_view()` helper
|
|
function.
|
|
|
|
### get_schema(self, request=None, public=False)
|
|
|
|
Returns a dictionary that represents the OpenAPI schema:
|
|
|
|
generator = SchemaGenerator(title='Stock Prices API')
|
|
schema = generator.get_schema()
|
|
|
|
The `request` argument is optional, and may be used if you want to apply
|
|
per-user permissions to the resulting schema generation.
|
|
|
|
This is a good point to override if you want to customize the generated
|
|
dictionary For example you might wish to add terms of service to the [top-level
|
|
`info` object][info-object]:
|
|
|
|
```
|
|
class TOSSchemaGenerator(SchemaGenerator):
|
|
def get_schema(self, *args, **kwargs):
|
|
schema = super().get_schema(*args, **kwargs)
|
|
schema["info"]["termsOfService"] = "https://example.com/tos.html"
|
|
return schema
|
|
```
|
|
|
|
## AutoSchema
|
|
|
|
**Per-View Customization**
|
|
|
|
```python
|
|
from rest_framework.schemas.openapi import AutoSchema
|
|
```
|
|
|
|
By default, view introspection is performed by an `AutoSchema` instance
|
|
accessible via the `schema` attribute on `APIView`.
|
|
|
|
auto_schema = some_view.schema
|
|
|
|
`AutoSchema` provides the OpenAPI elements needed for each view, request method
|
|
and path:
|
|
|
|
* A list of [OpenAPI components][openapi-components]. In DRF terms these are
|
|
mappings of serializers that describe request and response bodies.
|
|
* The appropriate [OpenAPI operation object][openapi-operation] that describes
|
|
the endpoint, including path and query parameters for pagination, filtering,
|
|
and so on.
|
|
|
|
```python
|
|
components = auto_schema.get_components(...)
|
|
operation = auto_schema.get_operation(...)
|
|
```
|
|
|
|
In compiling the schema, `SchemaGenerator` calls `get_components()` and
|
|
`get_operation()` for each view, allowed method, and path.
|
|
|
|
----
|
|
|
|
**Note**: The automatic introspection of components, and many operation
|
|
parameters relies on the relevant attributes and methods of
|
|
`GenericAPIView`: `get_serializer()`, `pagination_class`, `filter_backends`,
|
|
etc. For basic `APIView` subclasses, default introspection is essentially limited to
|
|
the URL kwarg path parameters for this reason.
|
|
|
|
----
|
|
|
|
`AutoSchema` encapsulates the view introspection needed for schema generation.
|
|
Because of this all the schema generation logic is kept in a single place,
|
|
rather than being spread around the already extensive view, serializer and
|
|
field APIs.
|
|
|
|
Keeping with this pattern, try not to let schema logic leak into your own
|
|
views, serializers, or fields when customizing the schema generation. You might
|
|
be tempted to do something like this:
|
|
|
|
```python
|
|
class CustomSchema(AutoSchema):
|
|
"""
|
|
AutoSchema subclass using schema_extra_info on the view.
|
|
"""
|
|
...
|
|
|
|
class CustomView(APIView):
|
|
schema = CustomSchema()
|
|
schema_extra_info = ... some extra info ...
|
|
```
|
|
|
|
Here, the `AutoSchema` subclass goes looking for `schema_extra_info` on the
|
|
view. This is _OK_ (it doesn't actually hurt) but it means you'll end up with
|
|
your schema logic spread out in a number of different places.
|
|
|
|
Instead try to subclass `AutoSchema` such that the `extra_info` doesn't leak
|
|
out into the view:
|
|
|
|
```python
|
|
class BaseSchema(AutoSchema):
|
|
"""
|
|
AutoSchema subclass that knows how to use extra_info.
|
|
"""
|
|
...
|
|
|
|
class CustomSchema(BaseSchema):
|
|
extra_info = ... some extra info ...
|
|
|
|
class CustomView(APIView):
|
|
schema = CustomSchema()
|
|
```
|
|
|
|
This style is slightly more verbose but maintains the encapsulation of the
|
|
schema related code. It's more _cohesive_ in the _parlance_. It'll keep the
|
|
rest of your API code more tidy.
|
|
|
|
If an option applies to many view classes, rather than creating a specific
|
|
subclass per-view, you may find it more convenient to allow specifying the
|
|
option as an `__init__()` kwarg to your base `AutoSchema` subclass:
|
|
|
|
```python
|
|
class CustomSchema(BaseSchema):
|
|
def __init__(self, **kwargs):
|
|
# store extra_info for later
|
|
self.extra_info = kwargs.pop("extra_info")
|
|
super().__init__(**kwargs)
|
|
|
|
class CustomView(APIView):
|
|
schema = CustomSchema(
|
|
extra_info=... some extra info ...
|
|
)
|
|
```
|
|
|
|
This saves you having to create a custom subclass per-view for a commonly used option.
|
|
|
|
Not all `AutoSchema` methods expose related `__init__()` kwargs, but those for
|
|
the more commonly needed options do.
|
|
|
|
### `AutoSchema` methods
|
|
|
|
#### `get_components()`
|
|
|
|
Generates the OpenAPI components that describe request and response bodies,
|
|
deriving their properties from the serializer.
|
|
|
|
Returns a dictionary mapping the component name to the generated
|
|
representation. By default this has just a single pair but you may override
|
|
`get_components()` to return multiple pairs if your view uses multiple
|
|
serializers.
|
|
|
|
#### `get_component_name()`
|
|
|
|
Computes the component's name from the serializer.
|
|
|
|
You may see warnings if your API has duplicate component names. If so you can override `get_component_name()` or pass the `component_name` `__init__()` kwarg (see below) to provide different names.
|
|
|
|
#### `get_reference()`
|
|
|
|
Returns a reference to the serializer component. This may be useful if you override `get_schema()`.
|
|
|
|
|
|
#### `map_serializer()`
|
|
|
|
Maps serializers to their OpenAPI representations.
|
|
|
|
Most serializers should conform to the standard OpenAPI `object` type, but you may
|
|
wish to override `map_serializer()` in order to customize this or other
|
|
serializer-level fields.
|
|
|
|
#### `map_field()`
|
|
|
|
Maps individual serializer fields to their schema representation. The base implementation
|
|
will handle the default fields that Django REST Framework provides.
|
|
|
|
For `SerializerMethodField` instances, for which the schema is unknown, or custom field subclasses you should override `map_field()` to generate the correct schema:
|
|
|
|
```python
|
|
class CustomSchema(AutoSchema):
|
|
"""Extension of ``AutoSchema`` to add support for custom field schemas."""
|
|
|
|
def map_field(self, field):
|
|
# Handle SerializerMethodFields or custom fields here...
|
|
# ...
|
|
return super().map_field(field)
|
|
```
|
|
|
|
Authors of third-party packages should aim to provide an `AutoSchema` subclass,
|
|
and a mixin, overriding `map_field()` so that users can easily generate schemas
|
|
for their custom fields.
|
|
|
|
#### `get_tags()`
|
|
|
|
OpenAPI groups operations by tags. By default tags taken from the first path
|
|
segment of the routed URL. For example, a URL like `/users/{id}/` will generate
|
|
the tag `users`.
|
|
|
|
You can pass an `__init__()` kwarg to manually specify tags (see below), or
|
|
override `get_tags()` to provide custom logic.
|
|
|
|
#### `get_operation()`
|
|
|
|
Returns the [OpenAPI operation object][openapi-operation] that describes the
|
|
endpoint, including path and query parameters for pagination, filtering, and so
|
|
on.
|
|
|
|
Together with `get_components()`, this is the main entry point to the view
|
|
introspection.
|
|
|
|
#### `get_operation_id()`
|
|
|
|
There must be a unique [operationid](openapi-operationid) for each operation.
|
|
By default the `operationId` is deduced from the model name, serializer name or
|
|
view name. The operationId looks like "listItems", "retrieveItem",
|
|
"updateItem", etc. The `operationId` is camelCase by convention.
|
|
|
|
#### `get_operation_id_base()`
|
|
|
|
If you have several views with the same model name, you may see duplicate
|
|
operationIds.
|
|
|
|
In order to work around this, you can override `get_operation_id_base()` to
|
|
provide a different base for name part of the ID.
|
|
|
|
#### `get_serializer()`
|
|
|
|
If the view has implemented `get_serializer()`, returns the result.
|
|
|
|
#### `get_request_serializer()`
|
|
|
|
By default returns `get_serializer()` but can be overridden to
|
|
differentiate between request and response objects.
|
|
|
|
#### `get_response_serializer()`
|
|
|
|
By default returns `get_serializer()` but can be overridden to
|
|
differentiate between request and response objects.
|
|
|
|
### `AutoSchema.__init__()` kwargs
|
|
|
|
`AutoSchema` provides a number of `__init__()` kwargs that can be used for
|
|
common customizations, if the default generated values are not appropriate.
|
|
|
|
The available kwargs are:
|
|
|
|
* `tags`: Specify a list of tags.
|
|
* `component_name`: Specify the component name.
|
|
* `operation_id_base`: Specify the resource-name part of operation IDs.
|
|
|
|
You pass the kwargs when declaring the `AutoSchema` instance on your view:
|
|
|
|
```
|
|
class PetDetailView(generics.RetrieveUpdateDestroyAPIView):
|
|
schema = AutoSchema(
|
|
tags=['Pets'],
|
|
component_name='Pet',
|
|
operation_id_base='Pet',
|
|
)
|
|
...
|
|
```
|
|
|
|
Assuming a `Pet` model and `PetSerializer` serializer, the kwargs in this
|
|
example are probably not needed. Often, though, you'll need to pass the kwargs
|
|
if you have multiple view targeting the same model, or have multiple views with
|
|
identically named serializers.
|
|
|
|
If your views have related customizations that are needed frequently, you can
|
|
create a base `AutoSchema` subclass for your project that takes additional
|
|
`__init__()` kwargs to save subclassing `AutoSchema` for each view.
|
|
|
|
[cite]: https://blog.heroku.com/archives/2014/1/8/json_schema_for_heroku_platform_api
|
|
[openapi]: https://github.com/OAI/OpenAPI-Specification
|
|
[openapi-specification-extensions]: https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.2.md#specification-extensions
|
|
[openapi-operation]: https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.2.md#operationObject
|
|
[openapi-tags]: https://swagger.io/specification/#tagObject
|
|
[openapi-operationid]: https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.2.md#fixed-fields-17
|
|
[openapi-components]: https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.2.md#componentsObject
|
|
[openapi-reference]: https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.2.md#referenceObject
|
|
[openapi-generator]: https://github.com/OpenAPITools/openapi-generator
|
|
[swagger-codegen]: https://github.com/swagger-api/swagger-codegen
|
|
[info-object]: https://swagger.io/specification/#infoObject
|
|
[drf-spectacular]: https://drf-spectacular.readthedocs.io/en/latest/readme.html
|