fumadocs-openapi 11.2.0 → 11.2.2

package/css/generated/shared.css

@@ -1 +1 @@
-@source inline("--- --fd-docs-row-1 -mode -ms-2 @4xl:flex-row @4xl:items-start @4xl:sticky @4xl:top-[calc(var(--fd-docs-row-1,2rem)+1rem)] @4xl:w-[400px] @container @default @defaultValue @deprecated @fuma-translate/react @fumari/json-schema-ts @fumari/stf @param @private @scalar/api-client-react @see @typescript-eslint/no-explicit-any a access access_token active adapter adapters addListener against all allFlows allow already alt an anchorSegments and animate-spin apiExample apiKey apiPlayground application/javascript application/json application/x-javascript application/x-www-form-urlencoded application/xml apply are array as assume async at auth-specific authCodeQuery authCtx authNode authSchemes authorization authorizationCode authorization_code authorize autoComplete avoid await backward badgeVariants base baseDir basic be because before between bg-fd-card bg-fd-muted bg-fd-primary/10 bg-fd-secondary binary blob blue body bodyMediaType bodyNode boolean border border-b border-current border-fd-border border-s border-t border-y buffer builderOptions built-in bundled but button buttonVariants by byteLength bytes cache cached call callback callbacks callbacksNode can cannot case catch changes charset check children class-variance-authority className client clientCredentials clientId clientSecret client_credentials client_error client_id client_secret cloned cn code codeProps codeUsages codegen codegens collapsible color com compatibility compiler component components conditions configuration const content contentTypes context cookie cookies core could createAutoPreset createClientAPIPage createCodeUsageGeneratorRegistry createContext createOpenAPIPageBase createProxy credentials css csv ctx current currentValue custom customization cva dark dark:text-blue-400 dark:text-green-400 dark:text-orange-400 dark:text-red-400 dark:text-yellow-400 data data-[open]:border-b-0 data-type default defaultAdapters defaultExampleId defaultItem defaultMdxComponents defaultOpen defaultShikiFactory defaultValue defaultValues default_processMarkdown definitions deprecated depth dereferenceBundledDocument dereferenceShallow dereferenced description descriptionNode development deviceAuthorization dialog didn disable disableCache disabled display displayNames div do doc docRoot docs document documents domain downloaded dynamicSource e each else empty:hidden enabled encodeRequestData encoded endpoint enforce engine ensure entire entries entry error eslint-disable eslint-disable-next-line example exampleId exampleRequests examples export exported extends fall fallback false fast-content-type-parse fd-page-tree-item-name fetch fetcher field fieldName fields file filePath files fine first first:border-t-0 flex flex-1 flex-col flex-col-reverse flex-row flex-wrap flow flows folder folderStyle font-medium font-mono font-semibold for form formData format found from fromSchema fs full fumadocs-core/source fumadocs-core/toc fumadocs-openapi/ui fumadocs-ui/mdx fumadocs:openapi fumadocs_openapi_requests fumadocs_openapi_responses function gap-0.5 gap-1 gap-1.5 gap-2 gap-2.5 gap-24 gap-3 gap-4 gap-6 gap-x-6 gap-y-4 gen generate generateTypeScriptDefinitions generated generated/defined generators get getAPIPageProps getClientAPIPageProps getExampleRequests getOpenAPIPageProps getPreferredType getRaw getSchema getSchemas getWatchPaths github-dark github-light given grant_type green group group-data-[panel-open]:rotate-180 groupId h1 handling hasHead hash hast-util-to-jsx-runtime headNode header headers headingLevel highlighter hook hover:bg-fd-accent hover:text-fd-accent-foreground href html htmlFor http icon id idToTitle idx if ignore img implicit import imports in in-document info initAuthInputs initial inline-flex input inputs instanceof instances instead insteawd interface internal into invalid is isLoading isMediaTypeSupported isRequired issues it item items items-center items-start js json json-schema-typed justify-between kept key keyof label labelVariants lang last:border-b-0 last:mb-0 latest layout lazy length let light line-through list list-disc list-inside listed listener listeners load loadDocument loaderPlugin localStorage lucide-react make map max-age may mb-1 mb-2 md mdxComponents me-auto media mediaAdapters mediaType message meta metaData method methodKeys mime min-w-0 modify mounted ms-auto mt-0! mt-10 mt-2 mt-3 multipart/form-data multiple must my-0! my-1.5 my-4 name name! named necessary need never new newKey no-cache node:fs node:path not not-last:pb-0 not-prose note null number oauth2 obj object of off omit on onChange onClick onCopy onOpenChange onSubmit onValueChange one only open openApiData openIdConnect openapi openapiMeta openid operation operationDescription operationId operations options or orange origin other out outline output overflow-auto overflow-hidden p p-2 p-3 packages page page-level pageData pages panelVariants param paramTypeKeys parameter parameterLabel parameterNode parameters params parent parsed parsedState parts party pass password path pathItem pathnameFromRequest payload pb-2 pe-3 persist persisted persistent place placeholder playground playgrounds please plugins pre prefix preloadOpenAPIPage preloaded prevent primary processed processor prop properties props prose-no-margin provider proxy proxyForwardCookie proxyUrl ps-2 ps-4.5 pt-1 pt-2 pt-2.5 px-1 px-2 px-3 py-0.5 py-1 py-1.5 py-2 query race raw react react-hooks/exhaustive-deps react/jsx-runtime readOnly readonly record red redirect_uri reference refs registerDefault registry rehype-react relativePath remark remark-rehype remarkGfm remarkRehype removeListener render renderAPIExampleLayout renderAPIExampleUsageTabs renderOperationLayout renderPageLayout renderParameterField renderRequestTabs renderRequestTabsDefault renderResponseTabs renderResponseTabsDefault renderWebhookLayout renderer replace request request-body requestData requestInit requestTimeout requestUrl requests required requirement requirementId requirements res reset resolvable resolve resolveMediaAdapter resolveServerUrl resolvedInput resolvedTheme resolves response response-body responseNode responseOfType responseTabs response_type responses rest result return returned returning root rounded-2xl rounded-lg rounded-md rounded-xl route s safeParse same sample satisfies scalar scan schema schemaId schemaMap schemaUI schemaUIShared schemas scheme schemeId schemes scope scopes search secondary seconds secret securities security securityEntries securityId securitySchemes segments segs select selector separator server server-to-server server-url serverSchema servers services set setData setExample setExampleData setIsJson setIsMounted setMounted setObjectUrl setOpen setRequirementId setSecurityId setServer setServerVariables setStore setToken setType setValue shadow-md shadow-sm shiki shikiOptions showDescription showExample showResponseSchema showTitle shrink-0 side signal single size size-3.5 size-4 slot slots sm so source spec specify spread src state staticSource status statusInfo statuses stf stfSync still storageKey storageKeys store stored string stringifyFieldKey structuredData styles submit summary supported sure switch t tab tabs testQuery text text-[0.8125rem] text-blue-600 text-fd-card-foreground text-fd-foreground text-fd-muted-foreground text-fd-primary text-fd-secondary-foreground text-green-500 text-green-600 text-nowrap text-orange-600 text-red-400 text-red-500 text-red-600 text-sm text-start text-xs text-yellow-600 text/css text/csv text/html text/plain the their them themes this through throw timeout timerRef tips title to toJsxRuntime toStaticData toc token tokenInfo token_type transform transformAuthInputs transformPageTree transition-colors tree true truncate try ts type typeof types typescript unchanged under unexpected unknown unlisted update updated updatedSchemeId updating url usage usageTabs usages use useAnchorId useApiClient useAuth useCopyButton useMemo useOnChange useOperationContext useQuery useRef useRenderContext useServerContext useState useStatusInfo useStf useStorageKey useTheme useTranslations used username using utf-8 v value values variable variables variant variants via virtual void w-14 w-fit w-full warn we webhook webhookCallbacks webhooks when whitespace-pre-wrap will with without won wrapping writeOnly x-codeSamples x-exclusiveCodeSample x-selectedCodeSample xml yellow you your");
+@source inline("--- --fd-docs-row-1 -mode -ms-2 @4xl:flex-row @4xl:items-start @4xl:sticky @4xl:top-[calc(var(--fd-docs-row-1,2rem)+1rem)] @4xl:w-[400px] @container @default @defaultValue @deprecated @fuma-translate/react @fumari/json-schema-ts @fumari/stf @param @private @scalar/api-client-react @see @typescript-eslint/no-explicit-any a access access_token active adapter adapters addListener against all allFlows allow already alt an anchorSegments and animate-spin apiExample apiKey apiPlayground application/javascript application/json application/x-javascript application/x-www-form-urlencoded application/xml apply are array as assume async at auth-specific authCodeQuery authCtx authNode authSchemes authorization authorizationCode authorization_code authorize autoComplete avoid await backward badgeVariants base baseDir basic be because before between bg-fd-card bg-fd-muted bg-fd-primary/10 bg-fd-secondary binary blob blue body bodyMediaType bodyNode boolean border border-b border-current border-fd-border border-s border-t border-y buffer builderOptions built-in bundled but button buttonVariants by byteLength bytes cache cached call callback callbacks callbacksNode can cannot case catch changes charset check children class-variance-authority className client clientCredentials clientId clientSecret client_credentials client_error client_id client_secret cloned cn code codeProps codeUsages codegen codegens collapsible color com compatibility compiler component components conditions configuration const content contentTypes context cookie cookies core could createAutoPreset createClientAPIPage createCodeUsageGeneratorRegistry createContext createOpenAPIPageBase createProxy credentials css csv ctx current currentValue custom customization cva dark dark:text-blue-400 dark:text-green-400 dark:text-orange-400 dark:text-red-400 dark:text-yellow-400 data data-[open]:border-b-0 data-type default defaultAdapters defaultExampleId defaultItem defaultMdxComponents defaultOpen defaultShikiFactory defaultValue defaultValues default_processMarkdown definitions deprecated depth dereferenceBundledDocument dereferenceShallow dereferenced description descriptionNode development deviceAuthorization dialog didn disable disableCache disabled display displayNames div do doc docRoot docs document documents domain downloaded dynamicSource e each else empty:hidden enabled encodeRequestData encoded endpoint enforce engine ensure entire entries entry error eslint-disable eslint-disable-next-line example exampleId exampleRequests examples export exported extends fallback false fast-content-type-parse fd-page-tree-item-name fetch fetcher field fieldName fields file filePath files fine first first:border-t-0 flex flex-1 flex-col flex-col-reverse flex-row flex-wrap flow flows folder folderStyle font-medium font-mono font-semibold for form formData format found from fromSchema fs full fumadocs-core/source fumadocs-core/toc fumadocs-openapi/ui fumadocs-ui/mdx fumadocs:openapi fumadocs_openapi_requests fumadocs_openapi_responses function gap-0.5 gap-1 gap-1.5 gap-2 gap-2.5 gap-24 gap-3 gap-4 gap-6 gap-x-6 gap-y-4 gen generate generateTypeScriptDefinitions generated generated/defined generators get getAPIPageProps getClientAPIPageProps getExampleRequests getOpenAPIPageProps getPreferredType getRaw getSchema getSchemas getWatchPaths github-dark github-light given grant_type green group group-data-[panel-open]:rotate-180 groupId h1 handling hasHead hash hast-util-to-jsx-runtime headNode header headers headingLevel highlighter hook hover:bg-fd-accent hover:text-fd-accent-foreground href html htmlFor http icon id idToTitle idx if ignore img implicit import imports in in-document info initAuthInputs initial inline-flex input inputs instanceof instances instead insteawd interface internal into is isLoading isMediaTypeSupported isRequired issues it item items items-center items-start js json json-schema-typed justify-between kept key keyof label labelVariants lang last:border-b-0 last:mb-0 latest layout lazy length let light line-through list list-disc list-inside listed listener listeners load loadDocument loaderPlugin localStorage lucide-react make map max-age may mb-1 mb-2 md mdxComponents me-auto media mediaAdapters mediaType message meta metaData method methodKeys mime min-w-0 modify mounted ms-auto mt-0! mt-10 mt-2 mt-3 multipart/form-data multiple must my-0! my-1.5 my-4 name name! named necessary need never new newKey no-cache node:fs node:path not not-last:pb-0 not-prose note null number oauth2 obj object of off omit on onChange onClick onCopy onOpenChange onSubmit onValueChange one only open openApiData openIdConnect openapi openapiMeta openid operation operationDescription operationId operations options or orange origin other out outline output overflow-auto overflow-hidden p p-2 p-3 packages page page-level pageData pages panelVariants param paramTypeKeys parameter parameterLabel parameterNode parameters params parent parsed parsedState parts party pass password path pathItem pathnameFromRequest payload pb-2 pe-3 persist persisted persistent place placeholder playground playgrounds please plugins pre prefix preloadOpenAPIPage preloaded prevent primary processed processor prop properties props prose-no-margin provider proxy proxyForwardCookie proxyUrl ps-2 ps-4.5 pt-1 pt-2 pt-2.5 px-1 px-2 px-3 py-0.5 py-1 py-1.5 py-2 query race raw react react-hooks/exhaustive-deps react/jsx-runtime readOnly readonly record red redirect_uri reference refs registerDefault registry rehype-react relativePath remark remark-rehype remarkGfm remarkRehype removeListener render renderAPIExampleLayout renderAPIExampleUsageTabs renderOperationLayout renderPageLayout renderParameterField renderRequestTabs renderRequestTabsDefault renderResponseTabs renderResponseTabsDefault renderWebhookLayout renderer replace request request-body requestData requestInit requestTimeout requestUrl requests required requirement requirementId requirements res reset resolvable resolve resolveMediaAdapter resolveServerUrl resolvedInput resolvedTheme resolves response response-body responseNode responseOfType responseTabs response_type responses rest result return returned returning root rounded-2xl rounded-lg rounded-md rounded-xl route s safeParse same sample satisfies scalar scan schema schemaId schemaMap schemaUI schemaUIShared schemas scheme schemeId schemes scope scopes search secondary seconds secret securities security securityEntries securityId securitySchemes segments segs select selector separator server server-to-server server-url serverSchema servers services set setData setExample setExampleData setIsJson setIsMounted setMounted setObjectUrl setOpen setRequirementId setSecurityId setServer setServerVariables setStore setToken setType setValue shadow-md shadow-sm shiki shikiOptions showDescription showExample showResponseSchema showTitle shrink-0 side signal single size size-3.5 size-4 slot slots sm so source spec specify spread src state staticSource status statusInfo statuses stf stfSync still storageKey storageKeys store stored string stringifyFieldKey structuredData styles submit summary supported sure switch t tab tabs testQuery text text-[0.8125rem] text-blue-600 text-fd-card-foreground text-fd-foreground text-fd-muted-foreground text-fd-primary text-fd-secondary-foreground text-green-500 text-green-600 text-nowrap text-orange-600 text-red-400 text-red-500 text-red-600 text-sm text-start text-xs text-yellow-600 text/css text/csv text/html text/plain the their them themes this throw timeout timerRef tips title to toJsxRuntime toStaticData toc token tokenInfo token_type transform transformAuthInputs transformPageTree transition-colors tree true truncate try ts type typeof types typescript unchanged under unexpected unknown unlisted update updated updatedSchemeId updating url usage usageTabs usages use useAnchorId useApiClient useAuth useCopyButton useMemo useOnChange useOperationContext useQuery useRef useRenderContext useServerContext useState useStatusInfo useStf useStorageKey useTheme useTranslations used username using utf-8 v value values variable variables variant variants via virtual void w-14 w-fit w-full warn we webhook webhookCallbacks webhooks when whitespace-pre-wrap will with without won wrapping writeOnly x-codeSamples x-exclusiveCodeSample x-selectedCodeSample xml yellow you your");

package/dist/playground/components/result-display.js

@@ -113,11 +113,20 @@ function ResponseResult({ data, reset, ...rest }) {
 }
 function TextResult({ lang, charset, data }) {
 	const code = useMemo(() => {
+		let out;
 		if (charset) try {
-			return new TextDecoder(charset).decode(data.body);
+			out = new TextDecoder(charset).decode(data.body);
 		} catch {}
-		return new TextDecoder("utf-8").decode(data.body);
-	}, [charset, data.body]);
+		out ??= new TextDecoder("utf-8").decode(data.body);
+		if (lang === "json") try {
+			out = JSON.stringify(JSON.parse(out), null, 2);
+		} catch {}
+		return out;
+	}, [
+		lang,
+		charset,
+		data.body
+	]);
 	return /* @__PURE__ */ jsx(ClientCodeBlock, {
 		lang: code.length > 5e3 ? "text" : lang,
 		code

package/dist/server/proxy.d.ts

@@ -1,14 +1,19 @@
 //#region src/server/proxy.d.ts
 declare const methods: readonly ["GET", "POST", "PUT", "DELETE", "PATCH", "HEAD"];
 type Handler = (req: Request) => Promise<Response>;
+type OriginMatcher = string | RegExp;
 interface Proxy extends Record<(typeof methods)[number], Handler> {
   handle: Handler;
 }
 interface CreateProxyOptions {
   /**
-   * List of allowed origins to proxy to.
+   * List of allowed origins to proxy to, also enforced on redirects.
+   *
+   * @defaultValue the proxy route's own origin (i.e. same-origin only). This
+   * prevents the proxy from being abused as an open proxy (SSRF) when no
+   * allowlist is configured; a warning is logged in that case.
    */
-  allowedOrigins?: string[];
+  allowedOrigins?: OriginMatcher[];
   /**
    * Determine if the proxied request is allowed.
    *

package/dist/server/proxy.js

@@ -13,24 +13,78 @@ const methodsWithBody = /* @__PURE__ */ new Set([
 	"PATCH",
 	"DELETE"
 ]);
+const redirectStatus = /* @__PURE__ */ new Set([
+	301,
+	302,
+	303,
+	307,
+	308
+]);
+const maxRedirects = 20;
+var ProxyError = class extends Error {
+	constructor(message, status = 400) {
+		super(message);
+		this.status = status;
+	}
+};
+function matchOrigin(origin, matcher) {
+	if (typeof matcher === "string") return matcher === origin;
+	matcher.lastIndex = 0;
+	return matcher.test(origin);
+}
 function createProxy(options = {}) {
 	const { allowedOrigins, filterRequest, overrides } = options;
 	const handlers = { handle: handler };
+	if (!allowedOrigins && !filterRequest) console.warn("[Proxy] `createProxy()` was called without `allowedOrigins` or `filterRequest`. Requests will be restricted to the proxy route's own origin. Set `allowedOrigins` to allow proxying to your API endpoints.");
 	async function handler(req) {
-		const searchParams = new URL(req.url).searchParams;
+		const reqUrl = new URL(req.url);
+		const searchParams = reqUrl.searchParams;
 		const rawUrl = searchParams.get("url");
 		if (!rawUrl) return Response.json("[Proxy] A `url` query parameter is required for proxy url", { status: 400 });
 		const targetUrl = URL.parse(rawUrl);
 		if (!targetUrl) return Response.json("[Proxy] Invalid `url` parameter value.", { status: 400 });
-		if (allowedOrigins && !allowedOrigins.includes(targetUrl.origin)) return Response.json(`[Proxy] The origin "${targetUrl.origin}" is not allowed.`, { status: 400 });
+		const allowed = allowedOrigins ?? [reqUrl.origin];
+		if (allowed.every((matcher) => !matchOrigin(targetUrl.origin, matcher))) return Response.json(`[Proxy] The origin "${targetUrl.origin}" is not allowed.`, { status: 400 });
 		const proxied = await rewriteRequest(req, targetUrl, searchParams.get("cookie"));
 		if (filterRequest && !filterRequest(proxied)) return Response.json("[Proxy] The proxied request is not allowed", { status: 403 });
 		try {
-			return rewriteResponse(await fetch(proxied));
+			return rewriteResponse(await proxyFetch(proxied, allowed));
 		} catch (err) {
+			if (err instanceof ProxyError) return Response.json(`[Proxy] ${err.message}`, { status: err.status });
 			return Response.json(`[Proxy] Failed to proxy request: ${err instanceof Error ? err.message : "unknown reason"}`, { status: 500 });
 		}
 	}
+	async function proxyFetch(initial, allowed) {
+		let method = initial.method;
+		let url = initial.url;
+		const headers = new Headers(initial.headers);
+		let body = initial.body && methodsWithBody.has(method.toUpperCase()) ? await initial.arrayBuffer() : void 0;
+		for (let redirects = 0; redirects <= maxRedirects; redirects++) {
+			const response = await fetch(new Request(url, {
+				method,
+				headers,
+				body,
+				cache: "no-cache",
+				redirect: "manual"
+			}));
+			const location = response.headers.get("location");
+			if (!redirectStatus.has(response.status) || !location) return response;
+			const next = new URL(location, url);
+			if (allowed.every((matcher) => !matchOrigin(next.origin, matcher))) throw new ProxyError(`The redirect origin "${next.origin}" is not allowed.`);
+			switch (response.status) {
+				case 301:
+				case 302: if (method === "GET" || method === "HEAD") break;
+				case 303:
+					method = "GET";
+					body = void 0;
+					headers.delete("content-length");
+					headers.delete("content-type");
+					break;
+			}
+			url = next.href;
+		}
+		throw new ProxyError("Too many redirects.", 508);
+	}
 	async function rewriteRequest(request, url, cookie) {
 		const headers = new Headers(request.headers);
 		headers.delete("origin");
@@ -48,6 +102,8 @@ function createProxy(options = {}) {
 	async function rewriteResponse(response) {
 		if (overrides?.response) response = overrides.response(response);
 		const headers = new Headers(response.headers);
+		headers.delete("content-encoding");
+		headers.delete("content-length");
 		headers.forEach((_value, originalKey) => {
 			if (originalKey.toLowerCase().startsWith("access-control-")) headers.delete(originalKey);
 		});

package/dist/utils/get-example-requests.js

@@ -1,29 +1,29 @@
 import { getPreferredType, pickExample } from "./schema.js";
 import { encodeRequestData } from "../requests/media/encode.js";
+import { dereferenceShallow } from "@fumadocs/api-docs/schema/dereference";
+import { getRaw } from "@scalar/json-magic/magic-proxy";
 import { sample } from "@fumadocs/api-docs/schema/sample";
 //#region src/utils/get-example-requests.ts
 function getExampleRequests({ path, method, ctx, operation, pathItem }) {
-	const { resolve } = ctx.schema;
-	const requestBody = resolve(operation.requestBody);
+	const requestBody = dereferenceShallow(operation.requestBody);
 	const media = requestBody?.content ? getPreferredType(requestBody.content) : null;
-	const bodyOfType = media ? resolve(requestBody.content[media]) : null;
-	const parameters = [...operation.parameters ?? [], ...pathItem.parameters ?? []].map((param) => resolve(param));
+	const bodyOfType = media ? dereferenceShallow(requestBody.content[media]) : null;
+	const parameters = [...operation.parameters ?? [], ...pathItem.parameters ?? []].map(dereferenceShallow);
 	if (bodyOfType?.examples) {
 		const result = [];
 		for (const [key, item] of Object.entries(bodyOfType.examples)) {
-			const value = resolve(item);
+			const { summary, description } = dereferenceShallow(item);
 			const data = getRequestData({
 				path,
 				body: requestBody,
 				parameters,
 				sampleKey: key,
-				method,
-				resolve
+				method
 			});
 			result.push({
 				id: key,
-				name: value.summary || key,
-				description: value.description,
+				name: summary || key,
+				description,
 				data,
 				encoded: encodeRequestData(data, ctx.mediaAdapters, parameters)
 			});
@@ -34,10 +34,9 @@ function getExampleRequests({ path, method, ctx, operation, pathItem }) {
 		path,
 		body: requestBody,
 		method,
-		parameters,
-		resolve
+		parameters
 	});
-	const schema = bodyOfType ? resolve(bodyOfType.schema) : void 0;
+	const schema = dereferenceShallow(bodyOfType?.schema);
 	return [{
 		id: "_default",
 		name: "Default",
@@ -46,7 +45,7 @@ function getExampleRequests({ path, method, ctx, operation, pathItem }) {
 		encoded: encodeRequestData(data, ctx.mediaAdapters, parameters)
 	}];
 }
-function getRequestData({ method, path, parameters, sampleKey, body, resolve }) {
+function getRequestData({ method, path, parameters, sampleKey, body }) {
 	const result = {
 		path: {},
 		cookie: {},
@@ -60,7 +59,7 @@ function getRequestData({ method, path, parameters, sampleKey, body, resolve })
 			if (param.schema) value = sample(param.schema);
 			else if (param.content) {
 				const type = getPreferredType(param.content);
-				const content = type ? resolve(param.content[type]) : void 0;
+				const content = type ? dereferenceShallow(param.content[type]) : void 0;
 				if (!content || !content.schema) throw new Error(`Cannot find "${param.name}" parameter info for media type "${type}" in ${path} ${method}`);
 				value = sample(content.schema);
 			}
@@ -82,10 +81,10 @@ function getRequestData({ method, path, parameters, sampleKey, body, resolve })
 		const type = getPreferredType(body.content);
 		if (!type) throw new Error(`Cannot find body schema for ${path} ${method}: missing media type`);
 		result.bodyMediaType = type;
-		const bodyOfType = resolve(body.content[type]);
-		if (bodyOfType.examples && sampleKey) result.body = resolve(bodyOfType.examples[sampleKey]).value;
-		else if (bodyOfType.example) result.body = bodyOfType.example;
-		else result.body = sample(resolve(bodyOfType?.schema) ?? {}, {
+		const bodyOfType = dereferenceShallow(body.content[type]);
+		if (bodyOfType.examples && sampleKey) result.body = getRaw(dereferenceShallow(bodyOfType.examples[sampleKey]).value);
+		else if (bodyOfType.example) result.body = getRaw(bodyOfType.example);
+		else result.body = sample(bodyOfType?.schema ?? {}, {
 			skipReadOnly: method !== "get",
 			skipWriteOnly: method === "get",
 			skipNonRequired: true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fumadocs-openapi",
-  "version": "11.2.0",
+  "version": "11.2.2",
   "description": "Generate MDX docs for your OpenAPI spec",
   "keywords": [
     "Docs",
@@ -56,8 +56,8 @@
     "remark-rehype": "^11.1.2",
     "shiki": "^4.3.1",
     "yaml": "^2.9.0",
-    "@fumari/stf": "1.1.0",
-    "@fumadocs/api-docs": "0.2.0"
+    "@fumadocs/api-docs": "0.2.1",
+    "@fumari/stf": "1.1.0"
   },
   "devDependencies": {
     "@scalar/api-client-react": "^2.0.32",
@@ -69,9 +69,9 @@
     "json-schema-typed": "^8.0.2",
     "tsdown": "0.22.5",
     "xml-js": "^1.6.11",
-    "fumadocs-ui": "npm:@fumadocs/base-ui@16.11.4",
+    "fumadocs-core": "16.11.5",
     "tsconfig": "0.0.0",
-    "fumadocs-core": "16.11.4"
+    "fumadocs-ui": "npm:@fumadocs/base-ui@16.11.5"
   },
   "peerDependencies": {
     "@scalar/api-client-react": "^2.0.20",