openapi-spec-validator 0.2.6

No project description provided

# OpenAPI Spec validator

[](https://pypi.python.org/pypi/openapi-spec-validator)
[](https://travis-ci.org/p1c2u/openapi-spec-validator)
[](https://codecov.io/github/p1c2u/openapi-spec-validator?branch=master)
[](https://pypi.python.org/pypi/openapi-spec-validator)
[](https://pypi.python.org/pypi/openapi-spec-validator)
[](https://pypi.python.org/pypi/openapi-spec-validator)

## About

OpenAPI Spec Validator is a Python library that validates OpenAPI Specs against the [OpenAPI 2.0 (aka Swagger)](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md) and [OpenAPI 3.0.0](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.0.md) specification. The validator aims to check for full compliance with the Specification.

## Installation

$ pip install openapi-spec-validator

## Usage

### Command Line Interface

Straight forward way:

```bash
$ openapi-spec-validator some.yaml
```

or more pythonic way:

```bash
$ python -m openapi_spec_validator some.yaml
```

### Examples

Validate spec:

```python

from openapi_spec_validator import validate_spec

validate_spec(spec_dict)
```

Add `spec_url` to validate spec with relative files:

```python

from openapi_spec_validator import validate_spec

validate_spec(spec_dict, spec_url='file:///path/to/spec/openapi.yaml')
```

You can also validate spec from url:

```python

from openapi_spec_validator import validate_spec_url

validate_spec_url('http://example.com/openapi.json')
```

If you want to iterate through validation errors:

```python

from openapi_spec_validator import openapi_v3_spec_validator

errors_iterator = openapi_v3_spec_validator.iter_errors(spec)
```

## Security Note

PyYAML, a requirement of this project, has a
[security vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2017-18342)
in the default implementation of `yaml.load()`, which allows execution
of arbitrary code while loading a target file or stream. OpenAPI Spec
Validator uses a safe loader to ensure that only Python objects
marked as safe can be executed. Thus, you are not exposed to this
vulnerability by using this package.

If you use `PyYAML` directly, be sure to use `yaml.safe_load()` to
avoid inadvertantly exposing youself to potentially malicous data. The
[PyYAML docs](https://pyyaml.org/wiki/PyYAMLDocumentation#loading-yaml)
describe this issue in detail.

## Related projects

* [openapi-core](https://github.com/p1c2u/openapi-core) is a Python library that adds client-side and server-side support for the OpenAPI.

## License

Copyright (c) 2017, Artur Maciag, All rights reserved.
Apache v2