You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Usher currently using the library oas-tools to perform various validations and quality-of-life improvements for taking an API First approach to application building. Unfortunately, it appears the library has been abandoned. The last release was over two years ago, and there are numerous security CVEs identified in it's dependencies that are not being addressed.
We should consider replacing oas-tools with a newer library, that is currently supported. Within the express ecosystem, I found express-openapi-validator, which appears to perform the same functions we are using from oas-tools.
✅ Request/Response Validation
✅ Security Middleware Validation
✅ Automatic mapping of Open API functions to express functions
Describe the solution you'd like
After reading over the project's readme, it seems it would be a fairly limited change to replace the libraries.
Small code updates in the main the-usher.js server set up, and replacing vendor extensions in the open api yaml file for the function mapping.
Additional context
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered:
Feature Overview
The Usher currently using the library oas-tools to perform various validations and quality-of-life improvements for taking an API First approach to application building. Unfortunately, it appears the library has been abandoned. The last release was over two years ago, and there are numerous security CVEs identified in it's dependencies that are not being addressed.
We should consider replacing oas-tools with a newer library, that is currently supported. Within the express ecosystem, I found express-openapi-validator, which appears to perform the same functions we are using from oas-tools.
✅ Request/Response Validation
✅ Security Middleware Validation
✅ Automatic mapping of Open API functions to express functions
Describe the solution you'd like
After reading over the project's readme, it seems it would be a fairly limited change to replace the libraries.
Small code updates in the main
the-usher.js
server set up, and replacing vendor extensions in the open api yaml file for the function mapping.Additional context
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered: