2021-10-19 08:33:49 -05:00
|
|
|
<!DOCTYPE html>
|
|
|
|
|
<html>
|
|
|
|
|
<head>
|
|
|
|
|
<meta charset="utf-8" />
|
|
|
|
|
<meta name="robots" content="noindex,nofollow">
|
|
|
|
|
<meta http-equiv="x-ua-compatible" content="ie=edge" />
|
|
|
|
|
<title>Builtin API Documentation - Penpot</title>
|
2022-07-12 13:44:29 -05:00
|
|
|
|
|
|
|
|
<link rel="preconnect" href="https://fonts.googleapis.com">
|
|
|
|
|
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
|
|
|
|
<link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@200;300;400;500;700&display=swap" rel="stylesheet">
|
2021-10-19 08:33:49 -05:00
|
|
|
<style>
|
2022-07-28 04:35:56 -05:00
|
|
|
{% include "app/templates/api-doc.css" %}
|
2021-10-19 08:33:49 -05:00
|
|
|
</style>
|
|
|
|
|
<script>
|
2022-07-28 04:35:56 -05:00
|
|
|
{% include "app/templates/api-doc.js" %}
|
2021-10-19 08:33:49 -05:00
|
|
|
</script>
|
|
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<main>
|
|
|
|
|
<header>
|
2022-07-12 13:44:29 -05:00
|
|
|
<h1>Penpot API Documentation (v{{version}})</h1>
|
2023-03-18 04:32:26 -05:00
|
|
|
<small class="menu">
|
|
|
|
|
[
|
|
|
|
|
<nav>
|
|
|
|
|
<a href="?type=js" {% if param-style = "js" %}class="selected"{% endif %}>JS</a>
|
|
|
|
|
<a href="?type=clj" {% if param-style = "cljs" %}class="selected"{% endif %}>CLJ</a>
|
|
|
|
|
</nav>
|
|
|
|
|
]
|
|
|
|
|
</small>
|
2021-10-19 08:33:49 -05:00
|
|
|
</header>
|
2023-03-18 04:32:26 -05:00
|
|
|
<section class="doc-content">
|
|
|
|
|
<h2>INTRODUCTION</h2>
|
|
|
|
|
<p>This documentation is intended to be a general overview of the penpot RPC API.
|
|
|
|
|
If you prefer, you can use <a href="/api/openapi.json">OpenAPI</a>
|
|
|
|
|
and/or <a href="/api/openapi">SwaggerUI</a> as alternative.</p>
|
|
|
|
|
|
|
|
|
|
<h2>GENERAL NOTES</h2>
|
|
|
|
|
|
|
|
|
|
<h3>Authentication</h3>
|
2023-08-08 07:50:49 -05:00
|
|
|
<p>The penpot backend right now offers two way for authenticate the request:
|
2023-03-18 04:32:26 -05:00
|
|
|
<b>cookies</b> (the same mechanism that we use ourselves on accessing the API from the
|
|
|
|
|
web application) and <b>access tokens</b>.</p>
|
|
|
|
|
|
|
|
|
|
<p>The cookie can be obtained using the <b>`login-with-password`</b> rpc method,
|
|
|
|
|
on successful login it sets the <b>`auth-token`</b> cookie with the session
|
|
|
|
|
token.</p>
|
|
|
|
|
|
|
|
|
|
<p>The access token can be obtained on the appropriate section on profile settings
|
|
|
|
|
and it should be provided using <b>`Authorization`</b> header with <b>`Token
|
|
|
|
|
<token-string>`</b> value.</p>
|
|
|
|
|
|
|
|
|
|
<h3>Content Negotiation</h3>
|
|
|
|
|
<p>The penpot API by default operates indistinctly with: <b>`application/json`</b>
|
|
|
|
|
and <b>`application/transit+json`</b> content types. You should specify the
|
|
|
|
|
desired content-type on the <b>`Accept`</b> header, the transit encoding is used
|
|
|
|
|
by default.</p>
|
2021-10-19 08:33:49 -05:00
|
|
|
|
2023-12-01 10:18:39 -05:00
|
|
|
<h3>SSE (Server-Sent Events)</h3>
|
|
|
|
|
<p>The methods marked with <b>SSE</b> returns
|
|
|
|
|
a <a href="https://html.spec.whatwg.org/multipage/server-sent-events.html"> SSE
|
|
|
|
|
formatted</a> stream on the response body, always with status 200. The events are
|
|
|
|
|
always encoded using `application/transit+json` encoding (for now no content
|
|
|
|
|
negotiation is possible on methods that return SSE streams). </p>
|
|
|
|
|
<p>On the javascript side you can use
|
|
|
|
|
the <a href="https://github.com/rexxars/eventsource-parser">eventsoure-parser</a>
|
|
|
|
|
library for propertly parsing the response body using the
|
|
|
|
|
standard <a href="https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API">Fetch
|
|
|
|
|
API</a></p>
|
2023-03-18 04:32:26 -05:00
|
|
|
|
|
|
|
|
<h3>Limits</h3>
|
|
|
|
|
<p>The rate limit work per user basis (this means that different api keys share
|
|
|
|
|
the same rate limit). For now the limits are not documented because we are
|
|
|
|
|
studying and analyzing the data. As a general rule, it should not be abused, if an
|
|
|
|
|
abusive use is detected, we will proceed to block the user's access to the
|
|
|
|
|
API.</p>
|
|
|
|
|
|
|
|
|
|
<h3>Webhooks</h3>
|
|
|
|
|
<p>All methods that emit webhook events are marked with flag <b>WEBHOOK</b>, the
|
|
|
|
|
data structure defined on each method represents the <i>payload</i> of the
|
|
|
|
|
event.</p>
|
|
|
|
|
<p>The webhook event structure has this aspect:</p>
|
|
|
|
|
<br/>
|
|
|
|
|
|
|
|
|
|
<pre>
|
|
|
|
|
{
|
|
|
|
|
"id": "db601c95-045f-808b-8002-362f08fcb621",
|
|
|
|
|
"name": "rename-file",
|
|
|
|
|
"props": <payload>,
|
|
|
|
|
"profileId": "db601c95-045f-808b-8002-361312e63531"
|
|
|
|
|
}
|
|
|
|
|
</pre>
|
|
|
|
|
</section>
|
|
|
|
|
<section class="rpc-doc-content">
|
|
|
|
|
<h2>RPC METHODS REFERENCE:</h2>
|
2022-06-22 04:42:23 -05:00
|
|
|
<ul class="rpc-items">
|
2023-04-24 13:18:14 -05:00
|
|
|
{% for item in methods %}
|
2022-07-28 04:35:56 -05:00
|
|
|
{% include "app/templates/api-doc-entry.tmpl" with item=item %}
|
2021-10-19 08:33:49 -05:00
|
|
|
{% endfor %}
|
|
|
|
|
</ul>
|
|
|
|
|
</section>
|
|
|
|
|
</main>
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
|
|
|
|
|
