grafana/pkg/api
2026-02-16 08:52:50 +00:00
..
apierrors Folders: Add max depth check with descendant to /apis (#115305) 2025-12-19 20:17:39 +00:00
avatar Avatar: Require sign-in, remove queue, respect timeout (#116891) 2026-01-27 09:41:13 +01:00
datasource Reroute GET /api/datasources/uid/:uid to the /apis handlers (#116678) 2026-02-12 12:53:04 +00:00
dtos QueryCaching: Get defaults ttl from frontend settings - Backend Code (#117941) 2026-02-11 15:59:31 -05:00
frontendlogging Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
pluginproxy Data Source: Proxy fallback routes must match all inputs (#116274) 2026-01-14 21:12:18 +01:00
response chore(deps): Switch to maintained gopkg.in/yaml fork (#114131) 2025-11-19 15:20:32 -05:00
routing Grafana: Replace magic number with a constant variable in response status (#80132) 2024-02-27 18:39:51 +02:00
static Apply security patch security-patch-202505051005.patch (#105754) 2025-05-21 21:34:05 +03:00
webassets FS: Get CDN prefix from configuration (#110615) 2025-09-08 15:57:03 +00:00
accesscontrol.go RBAC: Remove annotationPermissionUpdate feature toggle (#117213) 2026-01-31 02:23:48 +00:00
admin.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
admin_encryption.go admin api: Fix reencryption of private_key in signing_key table, introduce test for reencryption (#105010) 2025-05-15 09:51:25 +02:00
admin_provisioning.go Alerting: Remove legacy alerting (#83671) 2024-03-14 15:36:35 +01:00
admin_provisioning_test.go Alerting: Remove legacy alerting (#83671) 2024-03-14 15:36:35 +01:00
admin_test.go Auth: Add anonymous users view and stats (#78685) 2023-11-29 17:58:41 +01:00
admin_users.go Preferences: Support Create+Update+Delete over apiserver (#111715) 2025-10-02 21:58:08 +03:00
admin_users_test.go Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) 2025-01-10 17:37:37 +01:00
alerting.go Alerting: Update alerting module to 77a1e2f35be87bebc41a0bf634f336282f0b9b53 (#115498) 2025-12-23 14:46:44 -05:00
annotations.go RBAC: Remove annotationPermissionUpdate feature toggle (#117213) 2026-01-31 02:23:48 +00:00
annotations_test.go RBAC: Remove annotationPermissionUpdate feature toggle (#117213) 2026-01-31 02:23:48 +00:00
api.go Reroute GET /api/datasources/uid/:uid to the /apis handlers (#116678) 2026-02-12 12:53:04 +00:00
api_test.go Chore: Update test database initialization (#81673) 2024-02-09 09:35:39 -05:00
basic_auth.go
basic_auth_test.go
common_test.go Fix: Return auth labels from /api/users/lookup (#113584) 2025-11-07 16:51:41 +01:00
dashboard.go Dashboards: Remove deprecated dashboard id endpoints (#117227) 2026-02-08 13:11:34 -06:00
dashboard_permission.go Dashboards: Remove deprecated dashboard id endpoints (#117227) 2026-02-08 13:11:34 -06:00
dashboard_permission_test.go AccessControl: Use UIDs for Resource permissions frontend (#95552) 2024-10-31 16:17:13 +01:00
dashboard_snapshot.go Snapshots: Support public snapshot instance in latest version (#116086) 2026-01-14 15:28:16 -03:00
dashboard_snapshot_test.go RBAC: Remove dashboard guardians pt 3 (#102558) 2025-03-21 10:44:16 +00:00
dashboard_test.go Dashboards: Remove deprecated dashboard id endpoints (#117227) 2026-02-08 13:11:34 -06:00
dataproxy.go Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
datasources.go Datasources: Fix permissions cleanup when deleting datasource by name (#117289) 2026-02-03 08:59:08 +01:00
datasources_k8s.go Reroute GET /api/datasources/uid/:uid to the /apis handlers (#116678) 2026-02-12 12:53:04 +00:00
datasources_k8s_test.go Reroute GET /api/datasources/uid/:uid to the /apis handlers (#116678) 2026-02-12 12:53:04 +00:00
datasources_test.go Datasources: Fix permissions cleanup when deleting datasource by name (#117289) 2026-02-03 08:59:08 +01:00
ds_query.go log: added debug-log (#113156) 2025-10-29 14:19:24 +01:00
ds_query_test.go datasources: refactor the request validator api (#116619) 2026-01-23 14:55:15 +01:00
fakes.go Preinstall: Allow to set a download URL (#96535) 2024-11-29 16:02:33 +01:00
folder.go Folders: Add max depth check with descendant to /apis (#115305) 2025-12-19 20:17:39 +00:00
folder_bench_test.go Feat: Remove experimental permissionsFilterRemoveSubquery feature (#116405) 2026-01-16 18:09:32 +02:00
folder_permission.go Folders: block permissions updates on folders managed by provisioning. (#115751) 2026-01-16 09:18:56 +01:00
folder_permission_test.go Folders: block permissions updates on folders managed by provisioning. (#115751) 2026-01-16 09:18:56 +01:00
folder_test.go chore: move enable search to US configuration (#114070) 2025-11-18 17:32:25 +01:00
frontend_logging.go Chore: Bump Go to 1.23.0 (#92105) 2024-08-21 11:40:42 -04:00
frontend_logging_test.go Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
frontend_metrics.go Chore: Move ReqContext to contexthandler service (#62102) 2023-01-27 08:50:36 +01:00
frontendsettings.go QueryCaching: Get defaults ttl from frontend settings - Backend Code (#117941) 2026-02-11 15:59:31 -05:00
frontendsettings_test.go QueryCaching: Get defaults ttl from frontend settings - Backend Code (#117941) 2026-02-11 15:59:31 -05:00
grafana_com_proxy.go Plugins: Use grafana-com sso_api_token (#97096) 2024-12-02 16:04:05 +01:00
health.go Spanner-related fixes (#102376) 2025-03-19 12:34:44 +01:00
health_test.go Auth: Separate anonymous settings to its own struct (#97791) 2024-12-13 10:46:27 +01:00
http_server.go Reroute GET /api/datasources/uid/:uid to the /apis handlers (#116678) 2026-02-12 12:53:04 +00:00
http_server_test.go Grafana: Adds support for PKCS1 encrypted certs (#93451) 2024-09-19 15:03:06 -03:00
index.go Chore: Remove experimental feature individualCookiePreferences (#116374) 2026-01-16 09:29:57 +03:00
login.go IAM: Set userId in context logs from ErrTokenNeedsRotation (#118066) 2026-02-16 08:52:50 +00:00
login_oauth.go chore : Deprecating FeatureToggles.IsEnabledGlobally (#112885) 2025-10-24 12:02:53 -04:00
login_oauth_test.go Replace usage of http.DefaultClient and http.DefaultTransport (#104135) 2025-05-09 13:26:39 -04:00
login_test.go Chore: Add html_handler_requests metric (#113991) 2025-11-19 16:40:54 -05:00
org.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
org_invite.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
org_invite_test.go Chore: Fix goimports grouping in pkg/api (#62419) 2023-01-30 08:18:26 +00:00
org_test.go Authlib: Use types package rather than claims (#99243) 2025-01-21 12:06:55 +03:00
org_users.go Fix: Move the hidden users exclusion to the DB layer (#115254) 2025-12-16 09:37:59 +01:00
org_users_test.go Fix: Move the hidden users exclusion to the DB layer (#115254) 2025-12-16 09:37:59 +01:00
password.go Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) 2025-01-10 17:37:37 +01:00
playlist.go Playlists: Graduate to v1 apis (#117638) 2026-02-09 09:36:26 +03:00
plugin_checks.go Plugins: Avoid returning 404 for AutoEnabled apps (#93436) 2024-09-19 14:00:34 +01:00
plugin_checks_test.go Plugins: Avoid returning 404 for AutoEnabled apps (#93436) 2024-09-19 14:00:34 +01:00
plugin_dashboards.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
plugin_dashboards_test.go Chore: Evaluate if an app is disabled for API requests (#79564) 2023-12-15 16:37:39 +01:00
plugin_metrics.go Chore: Refactor backend plugin errors (#74928) 2023-09-25 11:56:03 +02:00
plugin_metrics_test.go Chore: Refactor backend plugin errors (#74928) 2023-09-25 11:56:03 +02:00
plugin_proxy.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
plugin_proxy_test.go Plugins: Preserve trailing slash in plugin proxy (#86859) 2024-06-05 13:36:14 +02:00
plugin_resource.go datasources: refactor the request validator api (#116619) 2026-01-23 14:55:15 +01:00
plugin_resource_test.go Plugins: Remove pkg/tsdb/* as dependency (#115886) 2026-01-07 11:28:25 +00:00
plugins.go Plugins: Move loading strategy into pkg/plugins (#116207) 2026-01-15 14:06:16 +00:00
plugins_test.go Plugins: Move loading strategy into pkg/plugins (#116207) 2026-01-15 14:06:16 +00:00
preferences.go Chore: Remove experimental feature individualCookiePreferences (#116374) 2026-01-16 09:29:57 +03:00
preferences_test.go Preferences: Use dashboard uid for the home dashboard (#106666) 2025-06-13 07:10:44 -05:00
quota.go docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
quota_test.go Add auth spans and remove deduplication code for scopes (#89804) 2024-07-02 22:08:57 -08:00
README.md Chore: Remove Bingo as Drone is removed (#110020) 2025-08-22 13:49:44 +02:00
render.go Rendering: Add support for rate limiter (#103987) 2025-04-24 15:31:19 +02:00
search.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
short_url.go Chore: Upgrade app-sdk to 0.50.1 (#117292) 2026-02-10 13:55:07 +03:00
short_url_test.go ShortURL: Use UpdateStatus client (#111170) 2025-10-30 15:57:03 +03:00
signup.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
swagger.go Swagger: Load embedded icons from CDN (#114632) 2025-12-01 11:17:28 +00:00
swagger_responses.go K8s: Schema v2: Return 406 in /api (#101842) 2025-03-07 18:20:02 -06:00
swagger_tags.json docs(openapi): Cleanup tag usage and minor fixes (#105546) 2025-08-28 01:51:04 +04:00
user.go Fix: Return auth labels from /api/users/lookup (#113584) 2025-11-07 16:51:41 +01:00
user_test.go IAM: Add userUID field to the user_auth table (#117771) 2026-02-12 12:14:37 +02:00
user_token.go CI: Bump golangci-lint to 2.0.2 (#103572) 2025-04-10 14:42:23 +02:00
user_token_test.go Forbid more redirect patterns (#110337) 2025-09-02 16:12:39 +02:00
utils.go Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) 2025-01-10 17:37:37 +01:00

OpenAPI specifications

Since version 8.4, HTTP API details are specified using OpenAPI v2. Starting from version 9.1, there is also an OpenAPI v3 specification (generated by the v2 one using this script).

OpenAPI annotations

The OpenAPI v2 specification is generated automatically from the annotated Go code using go-swagger which scans the source code for annotation rules. Refer to this getting started guide for getting familiar with the toolkit.

Developers modifying the HTTP API endpoints need to make sure to add the necessary annotations so that their changes are reflected into the generated specifications.

Example of endpoint annotation

The following route defines a PATCH endpoint under the /serviceaccounts/{serviceAccountId} path with tag service_accounts (used for grouping together several routes) and operation ID updateServiceAccount (used for uniquely identifying routes and associate parameters and response with them).

For enterprise endpoints make sure you add the enterprise tag as well.


// swagger:route PATCH /serviceaccounts/{serviceAccountId} service_accounts updateServiceAccount
//
// # Update service account
//
// Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation):
// action: `serviceaccounts:write` scope: `serviceaccounts:id:1` (single service account)
//
// Responses:
// 200: updateServiceAccountResponse
// 400: badRequestError
// 401: unauthorisedError
// 403: forbiddenError
// 404: notFoundError
// 500: internalServerError

The go-swagger can discover such annotations by scanning any code imported by pkg/server but by convention we place the endpoint annotations above the endpoint definition.

Example of endpoint parameters

The following struct defines the route parameters for the updateServiceAccount endpoint. The route expects:

  • a path parameter denoting the service account identifier and
  • a body parameter with the new values for the specific service account

// swagger:parameters updateServiceAccount
type UpdateServiceAccountParams struct {
	// in:path
	ServiceAccountId int64 `json:"serviceAccountId"`
	// in:body
	Body serviceaccounts.UpdateServiceAccountForm
}

Example of endpoint response

The following struct defines the response for the updateServiceAccount endpoint in case of a successful 200 response.


// swagger:response updateServiceAccountResponse
type UpdateServiceAccountResponse struct {
	// in:body
	Body struct {
		Message        string                                    `json:"message"`
		ID             int64                                     `json:"id"`
		Name           string                                    `json:"name"`
		ServiceAccount *serviceaccounts.ServiceAccountProfileDTO `json:"serviceaccount"`
	}
}

OpenAPI generation

Developers can re-create the OpenAPI v2 and v3 specifications using the following command:

make swagger-clean && make openapi3-gen

They can observe its output into the public/api-merged.json and public/openapi3.json files.

Finally, they can browser and try out both the OpenAPI v2 and v3 via the Swagger UI editor (served by the grafana server) by navigating to /swagger.

If there are any issues generating the specifications (e.g., diff containing unrelated changes to your PR or unusually large diff), please run the following command to ensure your Swagger version is up to date, then re-run the make commands.

  • go tool github.com/go-swagger/go-swagger/cmd/swagger@v0.30.6