longbridge__developers/.github/workflows/api-validation.yml

name: API Validation

on:
  pull_request:
    paths:
      - 'openapi/**'
      - 'script/**'
      - 'docs/**'
      - '.github/workflows/api-validation.yml'
  push:
    branches:
      - main
      - canary
    paths:
      - 'openapi/**'
      - 'script/**'
      - 'docs/**'
      - '.github/workflows/api-validation.yml'
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  validate-apis:
    name: Validate HTTP APIs (OpenAPI-driven)
    runs-on: ubuntu-latest
    timeout-minutes: 20
    env:
      OPENAPI_BASE_URL: https://openapi.longbridge.xyz
      OPENAPI_OAUTH_DISCOVERY: https://openapi.longbridge.xyz/.well-known/oauth-authorization-server
      OPENAPI_ACCESS_TOKEN: ${{ secrets.OPENAPI_ACCESS_TOKEN }}
      OPENAPI_CLIENT_ID: ${{ secrets.OPENAPI_CLIENT_ID }}
      OPENAPI_CLIENT_SECRET: ${{ secrets.OPENAPI_CLIENT_SECRET }}
      OPENAPI_REFRESH_TOKEN: ${{ secrets.OPENAPI_REFRESH_TOKEN }}
      OPENAPI_REDIRECT_URI: ${{ secrets.OPENAPI_REDIRECT_URI }}
      OPENAPI_AUTH_CODE: ${{ secrets.OPENAPI_AUTH_CODE }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - uses: oven-sh/setup-bun@v2

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Generate API catalog page
        run: bun run generate:api-catalog

      - name: Split Try-It APIs from docs
        run: bun run split:tryit-apis

      - name: Generate API validation cases from OpenAPI
        run: bun run generate:api-cases

      - name: Run API validation
        run: bun run validate:apis

      - name: Upload Try-It API split artifacts
        uses: actions/upload-artifact@v4
        with:
          name: tryit-api-split
          path: openapi/tryit/*.json