Skip to main content

Detecting breaking changes in your OpenAPI metadata

For the last 2 days I have been struggling with a breaking change I had in my ASP.NET Core web api that caused the consuming application to fail. I had a header parameter that was optional but became required after changing the nullability of my project to enabled.

Although I found the issue and was able to fix it quite fast, I was not happy with my current process and was wondering how I could prevent this from happening again.

This brought me to a final solution where I introduced some extra tests that compared the OpenAPI metadata between different implementations. Let me show you how I did it…

Generate OpenAPI documents at build time

To compare 2 OpenAPI metadata documents we first need to get them. For the already released version of the API, I can download the document through the OpenAPI endpoint (/openapi/v1.json by default). But what about the new version of the API that is still in development?

I solve this by generating the OpenAPI document at build time. This makes it easy to use and compare the OpenAPI documents without the need of hosting our OpenAPI.

Enabling build time generation is easy. We only need to add the following NuGet package to our project:

dotnet add package Microsoft.Extensions.ApiDescription.Server

Now if we build our application, it will:

  • Automatically generate the Open API document(s) associated with the app during build.
  • Populate the Open API documents in the app's output directory as {ProjectName}.json.

You can further customize this if you want. For more info on how to do this, have a look at the documentation:

Compare OpenAPI documents

Now that we have 2 OpenAPI documents available, we can compare them. Therefore I use the Open API Comparator. This tool is available both as a command line tool and as a nuget package.

To install it run the following command:

dotnet add package Criteo.OpenApi.Comparator

We can now integrate this in a unit test as you can see below:

If API changes are found, you can see the details on what has changed:

More information

Generate OpenAPI documents | Microsoft Learn

criteo/openapi-comparator

Popular posts from this blog

Podman– Command execution failed with exit code 125

After updating WSL on one of the developer machines, Podman failed to work. When we took a look through Podman Desktop, we noticed that Podman had stopped running and returned the following error message: Error: Command execution failed with exit code 125 Here are the steps we tried to fix the issue: We started by running podman info to get some extra details on what could be wrong: >podman info OS: windows/amd64 provider: wsl version: 5.3.1 Cannot connect to Podman. Please verify your connection to the Linux system using `podman system connection list`, or try `podman machine init` and `podman machine start` to manage a new Linux VM Error: unable to connect to Podman socket: failed to connect: dial tcp 127.0.0.1:2655: connectex: No connection could be made because the target machine actively refused it. That makes sense as the podman VM was not running. Let’s check the VM: >podman machine list NAME         ...

Cache stampede: when our cache turned against us

While investigating some performance issues, we ran into an ASP.NET Core API that cached a fairly expensive aggregation query for 60 seconds. Under normal load, that was fine: one request rebuilds the cache, everyone else reads from it. Under peak load, dozens of requests would arrive in that same expiry window, all see a cache miss, and all fire the same expensive query in parallel. The database didn't like that. That was the moment when our caching layer stopped helping and started hurting. A burst of requests comes in at the same time, all miss the cache, and all go hammer the database or the downstream API at once. That's a cache stampede . The cache was supposed to protect our backend, and for a few hundred milliseconds it did the opposite. Why this happens IMemoryCache.GetOrCreate (and its async sibling) looks like it protects you, but it doesn't add any locking on its own. Look at the naive version: public async Task<Report> GetReportAsync(string key) ...

Azure DevOps/ GitHub emoji

I’m really bad at remembering emoji’s. So here is cheat sheet with all emoji’s that can be used in tools that support the github emoji markdown markup: All credits go to rcaviers who created this list.