Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Open-source Postman alternative with type safety

recipeui.com

Post reply on HN
Print view View original

81–90 of 94 posts

Re: Show HN: Open-source Postman alternative with type safety

#81

Post by rabbah »

tyingq wrote: post #67
edpichler wrote: post #47

Just an advice: Be careful with Postman. It seems they upload all your secrets to their servers. We stopped to use it a time ago. I don't know if they changed in this regard.

That's true. Details are here: https://learning.postman.com/docs/getting-started/basics/syn... Basically if you sign into postman, it's copying everything to their cloud. It "works" without signing in, but you can't use workspaces which means it saves things only in an unstructured sort of draft format.

data is encrypted in motion and at rest https://www.postman.com/trust/security/

Re: Show HN: Open-source Postman alternative with type safety

#82

Post by rabbah »

ushakov wrote: post #75
_cenw wrote: post #49

The one piece of Postman that only Hoppscotch (a Postman fork) seems replicate that I definitely want is scripting. Often requests depend upon data from another, and being able to put things into the environment as you run different requests is super useful (even if you just use it for otherwise unsupported auth methods).

Hoppscotch is not a Postman fork as far as I know. You can do request chaining with Step CI ( https://stepci.com ) and Hurl ( https://hurl.dev )

or use Postman Flows https://learning.postman.com/docs/postman-flows/gs/flows-ove...

Re: Show HN: Open-source Postman alternative with type safety

#83

Post by Volbohel »

myfonj wrote: post #48
Volbohel wrote: post #11

Earlier quoted context omitted.

Storing secrets in the cloud has been a top concern for me, which is why we don't do it and one of the main reasons why the code is open sourced. Currently secrets are just stored locally on desktop and web via IndexDB. I'd love to hear people's thoughts on this as well!

One related thing I haven't learned from a glance at the pitch and GH: Does the desktop app make direct HTTP requests to target resources? Or are they similarly to web-app proxied through recipeui.com? Plus, is there a way for the web-app to bypass that proxy, when the target resource allows that in CORS (naturally)(or when there is some browser extension that does it on dev's side)?

Desktop App is better because it directly makes the request!

Web app will have a custom proxy filter or just allow you to make the request if CORS is not an issue soon. We’ll add this to a settings panel.

Thanks for being this up, we’ll make this more specific on our GitHub

Re: Show HN: Open-source Postman alternative with type safety

#84

Post by Volbohel »

arek_nawo wrote: post #80

I've seen quite a few Postman alternatives pop up recently (quite curious what's the reasoning behind that?). Currently I'm mostly using Hoppscotch - also open-source with pretty sweet UI, and Thunder Client in VS Code. That said, I'd consider switching for type-safety (or more specifically auto-completion) if there was an ability to e.g. import existing OpenAPI schema and automatically pick up the types.

Will follow up tomorrow! Our initial product had import OpenAPI schema, but we temporarily removed it after finding a few bugs.

Re: Show HN: Open-source Postman alternative with type safety

#85

Post by Volbohel »

amne wrote: post #44

This needs a button to import an OpenAPI spec (2.0, 3.0, doesn't matter) and let the user go wild on his own APIs. I've never thought of an API exploration tool to be a marketplace of ready-baked API collections. The speed is there, the UI can be improved, the selling point is "wooosh" on me.

Will follow up tomorrow! Our initial product had import OpenAPI schema, but we temporarily removed it after finding a few bugs.

Re: Show HN: Open-source Postman alternative with type safety

#86

Post by yencabulator »

politelemon wrote: post #55
easygenes wrote: post #17

Earlier quoted context omitted.

So comparing the two... Unique to Restfox - a nice "beautify json" button - in addition to response code and time, shows size and exact timestamp of response - Can drag and drop to reorganize folders and items in sidebar Unique to RecipeUI - TypeScript interface definitions - Generates cURL, Javascript and Python code snippets you can copy Probably other things, but these are what stood out.

Restfox works right in the browser, no additional downloads needed, it seems.

That can also be a downside: CORS. Restfox recommends a browser extension to workaround that, and now we're back to additional downloads.

Re: Show HN: Open-source Postman alternative with type safety

#87

Post by RandomChance »

I love the typescript definitions! I do have to say the way that pasting anything into the URL bar deletes the existing URL is super painful! I just wanted to change the variable case :(

The fact that you also have typescript defs for the URL parameters is a nice touch though.

Re: Show HN: Open-source Postman alternative with type safety

#88

Post by tyingq »

rabbah wrote: post #81
tyingq wrote: post #67

Earlier quoted context omitted.

That's true. Details are here: https://learning.postman.com/docs/getting-started/basics/syn... Basically if you sign into postman, it's copying everything to their cloud. It "works" without signing in, but you can't use workspaces which means it saves things only in an unstructured sort of draft format.

data is encrypted in motion and at rest https://www.postman.com/trust/security/

By unstructured I mean "no workspaces", so you can't organize any of it. Like a filesystem with one folder called "stuff".

Re: Show HN: Open-source Postman alternative with type safety

#89

Post by gangstead »

arek_nawo wrote: post #80

I've seen quite a few Postman alternatives pop up recently (quite curious what's the reasoning behind that?). Currently I'm mostly using Hoppscotch - also open-source with pretty sweet UI, and Thunder Client in VS Code. That said, I'd consider switching for type-safety (or more specifically auto-completion) if there was an ability to e.g. import existing OpenAPI schema and automatically pick up the types.

My guess at the Postman-alikes. Postman has evolved way past its original usefulness and is aggressively trying to push enterprise features and anything to make the business sustainable. I'm not mad at them for that but eventually you remember that you just wanted a graphical curl to mess with, not a team secret manager with workspaces and a test runner etc.

The basic functionality starts off pretty easy to build so there's a large pool of people who decide to take a crack at it.

Post reply on HN