grafana/pkg/api
2026-06-10 09:16:46 +00:00
..
apierrors Reapply "Dashboards: Skip service for /api/dashboard/db (#122027)" (#124908) (#125950) 2026-06-08 20:23:01 +03:00
avatar Users: Use SHA-256 for Gravatar email identifier (#122319) 2026-04-13 16:12:51 +02:00
datasource DataSource/Proxy: decouple from DataSourceService from ds_proxy (#125752) 2026-06-08 13:28:30 +03:00
dtos Analytics: Add PostHog echo backend (#122263) 2026-06-09 12:30:17 +01:00
frontendlogging Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
pluginproxy DataSource/Proxy: decouple from DataSourceService from ds_proxy (#125752) 2026-06-08 13:28:30 +03:00
response chore(deps): Switch to maintained gopkg.in/yaml fork (#114131) 2025-11-19 15:20:32 -05:00
routing [chore] Update go to v1.26.0, and the golangci-lint action to v9 (#118436) 2026-02-19 15:04:35 +01:00
static Apply security patch security-patch-202505051005.patch (#105754) 2025-05-21 21:34:05 +03:00
webassets React 19: Build assets with React 19 (#118457) 2026-02-20 14:41:43 +00:00
accesscontrol.go patch(security): apply May 2026 patches (#124824) 2026-05-13 18:53:11 +02:00
admin.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
admin_encryption.go admin api: Fix reencryption of private_key in signing_key table, introduce test for reencryption (#105010) 2025-05-15 09:51:25 +02:00
admin_provisioning.go Alerting: Remove legacy alerting (#83671) 2024-03-14 15:36:35 +01:00
admin_provisioning_test.go Alerting: Remove legacy alerting (#83671) 2024-03-14 15:36:35 +01:00
admin_test.go Auth: Add anonymous users view and stats (#78685) 2023-11-29 17:58:41 +01:00
admin_users.go Preferences: Support Create+Update+Delete over apiserver (#111715) 2025-10-02 21:58:08 +03:00
admin_users_test.go Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) 2025-01-10 17:37:37 +01:00
alerting.go Alerting: Allow restricting contact point integration types (#118858) 2026-04-20 14:41:15 -04:00
annotations.go patch(security): apply May 2026 patches (#124824) 2026-05-13 18:53:11 +02:00
annotations_test.go Dashboards: Refactor to keep perms separated (#122041) 2026-04-07 13:00:45 -05:00
api.go Chore: Flatten API surface of public dashboards (#124088) 2026-05-06 15:03:42 -04:00
api_test.go Chore: Update test database initialization (#81673) 2024-02-09 09:35:39 -05:00
basic_auth.go Macaron: remove custom Request type (#37874) 2021-09-01 11:18:30 +02:00
basic_auth_test.go Macaron: remove custom Request type (#37874) 2021-09-01 11:18:30 +02:00
common_test.go Fix: Return auth labels from /api/users/lookup (#113584) 2025-11-07 16:51:41 +01:00
dashboard.go Reapply "Dashboards: Skip service for /api/dashboard/db (#122027)" (#124908) (#125950) 2026-06-08 20:23:01 +03:00
dashboard_permission.go Dashboards: Deprecate the dashboard and folder apis in swagger (#121222) 2026-03-26 21:34:20 +03:00
dashboard_permission_test.go AccessControl: Use UIDs for Resource permissions frontend (#95552) 2024-10-31 16:17:13 +01:00
dashboard_snapshot.go patch(security): apply May 2026 patches (#124824) 2026-05-13 18:53:11 +02:00
dashboard_snapshot_test.go Snapshots: Add public mode and external token support to snapshot MT k8s api (#120619) 2026-04-30 12:01:04 -03:00
dashboard_test.go Reapply "Dashboards: Skip service for /api/dashboard/db (#122027)" (#124908) (#125950) 2026-06-08 20:23:01 +03:00
dataproxy.go Datasources: Disable deprecated numeric id using APIs by default (#119930) 2026-03-12 12:40:48 +01:00
datasources.go DataSource/Proxy: decouple from DataSourceService from ds_proxy (#125752) 2026-06-08 13:28:30 +03:00
datasources_k8s.go Add new feature flag for rollout of datasource CRUD APIs (#122618) 2026-04-17 10:59:26 -04:00
datasources_k8s_test.go Add new feature flag for rollout of datasource CRUD APIs (#122618) 2026-04-17 10:59:26 -04:00
datasources_test.go Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid (#125398) 2026-05-25 17:28:52 +03:00
ds_query.go Query: Rename query.grafana.app to datasource.grafana.app (#118267) 2026-02-18 18:36:17 +03:00
ds_query_test.go DataSources/Proxy: Use map[string]any rather than simplejson (#125465) 2026-05-28 21:47:07 +03:00
fakes.go Plugins: Remove rendering related code (#123519) 2026-04-28 08:54:44 +02:00
folder.go unified-storage: fix case permission on folder list query (#122334) 2026-04-10 14:44:30 -03:00
folder_bench_test.go fix: starred dashboards nav tree display (#124841) 2026-05-14 14:54:35 +03:00
folder_permission.go Dashboards: Deprecate the dashboard and folder apis in swagger (#121222) 2026-03-26 21:34:20 +03:00
folder_permission_test.go Dashboards: Refactor to keep perms separated (#122041) 2026-04-07 13:00:45 -05:00
folder_test.go Folders: Move folder specific errors to the folder service (#122050) 2026-04-09 00:06:36 +00:00
frontend_logging.go Chore: Bump Go to 1.23.0 (#92105) 2024-08-21 11:40:42 -04:00
frontend_logging_test.go Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
frontend_metrics.go Chore: Move ReqContext to contexthandler service (#62102) 2023-01-27 08:50:36 +01:00
frontendsettings.go Analytics: Add PostHog echo backend (#122263) 2026-06-09 12:30:17 +01:00
frontendsettings_test.go Plugins: Remove rendering related code (#123519) 2026-04-28 08:54:44 +02:00
grafana_com_proxy.go apply security patches (#124912) 2026-05-14 16:27:17 +00:00
health.go Spanner-related fixes (#102376) 2025-03-19 12:34:44 +01:00
health_test.go Auth: Separate anonymous settings to its own struct (#97791) 2024-12-13 10:46:27 +01:00
http_server.go Preferences: Use K8s client in legacy user api endpoints (#123808) 2026-05-14 14:01:25 +01:00
http_server_test.go Server: Support simultaneous TCP and Unix domain socket serving (#118627) 2026-02-27 09:25:24 +01:00
index.go Chore: Remove grafanaconThemes (#126002) 2026-06-10 09:16:46 +00:00
live_test.go Live: Add RBAC for pushing to live (#120547) 2026-03-17 17:28:41 -06:00
login.go Auth: Remove passwordless (magic link) authentication backend implementation (#118881) 2026-03-27 09:19:58 -05:00
login_oauth.go Auth: URL-encode redirectTo cookie value in OAuth login flow (#121953) 2026-04-13 18:45:36 +02:00
login_oauth_test.go Auth: URL-encode redirectTo cookie value in OAuth login flow (#121953) 2026-04-13 18:45:36 +02:00
login_test.go Chore: Add html_handler_requests metric (#113991) 2025-11-19 16:40:54 -05:00
org.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
org_invite.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
org_invite_test.go Chore: Fix goimports grouping in pkg/api (#62419) 2023-01-30 08:18:26 +00:00
org_test.go Authlib: Use types package rather than claims (#99243) 2025-01-21 12:06:55 +03:00
org_users.go Fix: Move the hidden users exclusion to the DB layer (#115254) 2025-12-16 09:37:59 +01:00
org_users_test.go IAM: Add support for kubernetes APIs in user service (#120502) 2026-03-18 14:57:55 +02:00
password.go IAM: Add GetByLoginWithPassword to the User service interface (#121838) 2026-04-07 11:31:50 +03:00
playlist.go Chore: Add K8s client provider (#122900) 2026-04-17 13:47:54 +03:00
plugin_checks.go Plugins: Avoid returning 404 for AutoEnabled apps (#93436) 2024-09-19 14:00:34 +01:00
plugin_checks_test.go Plugins: Avoid returning 404 for AutoEnabled apps (#93436) 2024-09-19 14:00:34 +01:00
plugin_dashboards.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
plugin_dashboards_test.go Chore: Evaluate if an app is disabled for API requests (#79564) 2023-12-15 16:37:39 +01:00
plugin_metrics.go Chore: Refactor backend plugin errors (#74928) 2023-09-25 11:56:03 +02:00
plugin_metrics_test.go Chore: Refactor backend plugin errors (#74928) 2023-09-25 11:56:03 +02:00
plugin_proxy.go AppPlugins: Refactor plugin proxy for easier reuse in apiserver (#124075) 2026-05-05 14:11:47 +00:00
plugin_proxy_test.go Plugins: Preserve trailing slash in plugin proxy (#86859) 2024-06-05 13:36:14 +02:00
plugin_resource.go DataSources/Proxy: Use map[string]any rather than simplejson (#125465) 2026-05-28 21:47:07 +03:00
plugin_resource_test.go patch(security): apply May 2026 patches (#124824) 2026-05-13 18:53:11 +02:00
plugins.go Plugins: Add include-datasource param to show nested datasources in catalog (#122957) 2026-04-24 10:00:07 +02:00
plugins_test.go Plugins: Add include-datasource param to show nested datasources in catalog (#122957) 2026-04-24 10:00:07 +02:00
preferences.go Chore: remove regionalFormat code in backend (#124610) 2026-05-14 17:00:47 +01:00
preferences_test.go Preferences: Use dashboard uid for the home dashboard (#106666) 2025-06-13 07:10:44 -05:00
quota.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
quota_test.go Add auth spans and remove deduplication code for scopes (#89804) 2024-07-02 22:08:57 -08:00
README.md Chore: Remove Bingo as Drone is removed (#110020) 2025-08-22 13:49:44 +02:00
render.go Rendering: Remove support for unimplemented render session (#119962) 2026-03-11 11:20:20 +01:00
search.go [chore] Update go to v1.26.0, and the golangci-lint action to v9 (#118436) 2026-02-19 15:04:35 +01:00
short_url.go ShortURL: Improve get error handling and delete (#125654) 2026-05-28 12:20:06 -03:00
short_url_k8s_test.go ShortURL: Improve error handling in k8s goto redirect (#124983) 2026-05-19 10:55:19 -03:00
short_url_test.go ShortURL: Improve get error handling and delete (#125654) 2026-05-28 12:20:06 -03:00
signup.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
swagger.go CSP: Add configurable form-action directive via $FORM_ACTION_ADDITIONAL_HOSTS (#121473) 2026-03-31 15:42:40 +00:00
swagger_responses.go K8s: Schema v2: Return 406 in /api (#101842) 2025-03-07 18:20:02 -06:00
swagger_tags.json docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
user.go Chore: Frontend-only changes to enable removing /helpflags route (#124984) 2026-06-09 10:13:55 +01:00
user_test.go IAM: Add support for kubernetes APIs in user service (#120502) 2026-03-18 14:57:55 +02:00
user_token.go Redirect logic update (#118663) 2026-02-23 10:14:22 +00:00
user_token_test.go Forbid more redirect patterns (#110337) 2025-09-02 16:12:39 +02:00
utils.go Redirect logic update (#118663) 2026-02-23 10:14:22 +00:00

OpenAPI specifications

Since version 8.4, HTTP API details are specified using OpenAPI v2. Starting from version 9.1, there is also an OpenAPI v3 specification (generated by the v2 one using this script).

OpenAPI annotations

The OpenAPI v2 specification is generated automatically from the annotated Go code using go-swagger which scans the source code for annotation rules. Refer to this getting started guide for getting familiar with the toolkit.

Developers modifying the HTTP API endpoints need to make sure to add the necessary annotations so that their changes are reflected into the generated specifications.

Example of endpoint annotation

The following route defines a PATCH endpoint under the /serviceaccounts/{serviceAccountId} path with tag service_accounts (used for grouping together several routes) and operation ID updateServiceAccount (used for uniquely identifying routes and associate parameters and response with them).

For enterprise endpoints make sure you add the enterprise tag as well.


// swagger:route PATCH /serviceaccounts/{serviceAccountId} service_accounts updateServiceAccount
//
// # Update service account
//
// Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation):
// action: `serviceaccounts:write` scope: `serviceaccounts:id:1` (single service account)
//
// Responses:
// 200: updateServiceAccountResponse
// 400: badRequestError
// 401: unauthorisedError
// 403: forbiddenError
// 404: notFoundError
// 500: internalServerError

The go-swagger can discover such annotations by scanning any code imported by pkg/server but by convention we place the endpoint annotations above the endpoint definition.

Example of endpoint parameters

The following struct defines the route parameters for the updateServiceAccount endpoint. The route expects:

  • a path parameter denoting the service account identifier and
  • a body parameter with the new values for the specific service account

// swagger:parameters updateServiceAccount
type UpdateServiceAccountParams struct {
	// in:path
	ServiceAccountId int64 `json:"serviceAccountId"`
	// in:body
	Body serviceaccounts.UpdateServiceAccountForm
}

Example of endpoint response

The following struct defines the response for the updateServiceAccount endpoint in case of a successful 200 response.


// swagger:response updateServiceAccountResponse
type UpdateServiceAccountResponse struct {
	// in:body
	Body struct {
		Message        string                                    `json:"message"`
		ID             int64                                     `json:"id"`
		Name           string                                    `json:"name"`
		ServiceAccount *serviceaccounts.ServiceAccountProfileDTO `json:"serviceaccount"`
	}
}

OpenAPI generation

Developers can re-create the OpenAPI v2 and v3 specifications using the following command:

make swagger-clean && make openapi3-gen

They can observe its output into the public/api-merged.json and public/openapi3.json files.

Finally, they can browser and try out both the OpenAPI v2 and v3 via the Swagger UI editor (served by the grafana server) by navigating to /swagger.

If there are any issues generating the specifications (e.g., diff containing unrelated changes to your PR or unusually large diff), please run the following command to ensure your Swagger version is up to date, then re-run the make commands.

  • go tool github.com/go-swagger/go-swagger/cmd/swagger@v0.30.6