Hoppscotch: 79,200 GitHub Stars — 开源API开发平台对比 Postman、Insomnia、Bruno 2026

# macOS (Homebrew)
brew install --cask hoppscotch

# Windows (Winget)
winget install Hoppscotch.Hoppscotch

# Linux (Flatpak)
flatpak install flathub io.hoppscotch.Hoppscotch

# 安装前置依赖（Debian/Ubuntu）
sudo apt-get install -y python3 g++ build-essential

# 全局安装 CLI
npm i -g @hoppscotch/cli

# 验证安装
hopp --version
# 输出: 0.31.2

# 拉取 AIO 镜像
docker pull hoppscotch/hoppscotch:latest

# 创建环境文件
cat > .env << 'EOF'
# 数据库
DATABASE_URL=postgresql://postgres:postgres@localhost:5432/hoppscotch

# JWT 密钥
JWT_SECRET=$(openssl rand -hex 32)
REFRESH_TOKEN_SECRET=$(openssl rand -hex 32)

# 基础 URL
REDIRECT_URL=http://localhost:3000
ADMIN_URL=http://localhost:3100
BACKEND_URL=http://localhost:3170

# 会话密钥
SESSION_SECRET=$(openssl rand -hex 32)
EOF

# 运行 AIO 容器
docker run -d \
  -p 3000:3000 \
  -p 3100:3100 \
  -p 3170:3170 \
  --env-file .env \
  --restart unless-stopped \
  --name hoppscotch \
  hoppscotch/hoppscotch:latest

# docker-compose.yml
version: "3.8"

services:
  hoppscotch:
    image: hoppscotch/hoppscotch:2026.4.1
    container_name: hoppscotch-app
    ports:
      - "3000:3000"   # 主应用
      - "3100:3100"   # 管理面板
      - "3170:3170"   # 后端 API
    env_file: .env
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - hoppscotch-net

  postgres:
    image: postgres:16-alpine
    container_name: hoppscotch-db
    environment:
      POSTGRES_DB: hoppscotch
      POSTGRES_USER: hoppscotch
      POSTGRES_PASSWORD: ${DB_PASSWORD:-changeme}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U hoppscotch"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - hoppscotch-net

volumes:
  postgres_data:
    driver: local

networks:
  hoppscotch-net:
    driver: bridge

docker compose up -d

# 验证所有服务健康
docker compose ps

# 查看日志
docker compose logs -f hoppscotch

# 查看实时请求统计
docker compose logs -f hoppscotch | grep "Request processed"

# .github/workflows/api-tests.yml
name: 使用 Hoppscotch CLI 进行 API 测试

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main]

jobs:
  api-test:
    runs-on: ubuntu-latest
    steps:
      - name: 检出代码
        uses: actions/checkout@v4

      - name: 设置 Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: "npm"

      - name: 安装 Hoppscotch CLI
        run: npm i -g @hoppscotch/cli

      - name: 验证 CLI 版本
        run: hopp --version

      - name: 启动测试服务器
        run: |
          npm run start:test &
          npx wait-on http://localhost:8080 --timeout 30000

      - name: 运行 API 集合测试
        run: |
          hopp test collections/api-tests.json \
            -e environments/test.json \
            --reporter-junit test-results.xml \
            --delay 500
        env:
          API_BASE_URL: http://localhost:8080

      - name: 上传测试结果
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: api-test-results
          path: test-results.xml

// scripts/run-api-tests.js
const { execSync } = require("child_process");
const path = require("path");

const collectionPath = path.join(__dirname, "../collections");
const envPath = path.join(__dirname, "../environments");

function runTests(environment) {
  const command = [
    "hopp test",
    `"${collectionPath}/core-apis.json"`,
    `-e "${envPath}/${environment}.json"`,
    "--reporter-junit",
    `"reports/${environment}-results.xml"`,
  ].join(" ");

  console.log(`正在对 ${environment} 运行测试...`);
  execSync(command, { stdio: "inherit" });
}

// 在部署到生产环境前对 staging 运行
runTests("staging");

// vite.config.js
import { defineConfig } from "vite";
import vue from "@vitejs/plugin-vue";

export default defineConfig({
  plugins: [vue()],
  server: {
    proxy: {
      "/api": {
        target: process.env.API_BASE_URL || "http://localhost:3170",
        changeOrigin: true,
        rewrite: (path) => path.replace(/^\/api/, ""),
      },
    },
  },
});

// Hoppscotch 前置脚本
const token = pw.env.get("AUTH_TOKEN");
const expiry = pw.env.get("TOKEN_EXPIRY");

if (!token || Date.now() > Number(expiry)) {
  const res = await pw.api.post("https://auth.example.com/oauth/token", {
    body: JSON.stringify({
      client_id: pw.env.get("CLIENT_ID"),
      client_secret: pw.env.get("CLIENT_SECRET"),
      grant_type: "client_credentials",
    }),
    headers: {
      "Content-Type": "application/json",
    },
  });

  const data = JSON.parse(res.body);
  pw.env.set("AUTH_TOKEN", data.access_token);
  pw.env.set("TOKEN_EXPIRY", String(Date.now() + data.expires_in * 1000));
}

// 将 token 应用到当前请求
pw.headers.set("Authorization", `Bearer ${pw.env.get("AUTH_TOKEN")}`);

// Hoppscotch 测试脚本
pw.test("状态码为 200", () => {
  pw.expect(pw.response.status).toBe(200);
});

pw.test("响应具有正确的 Content-Type", () => {
  pw.expect(pw.response.headers["content-type"]).toInclude("application/json");
});

pw.test("响应体包含用户 ID", () => {
  const json = pw.response.json();
  pw.expect(json).toHaveProperty("id");
  pw.expect(json.id).toBeGreaterThan(0);
});

pw.test("响应时间可接受", () => {
  pw.expect(pw.response.time).toBeLessThan(500);
});

# 使用并发设置运行集合
hopp test load-test-collection.json \
  --iteration-count 100 \
  --delay 100 \
  --env production.json

# 导出 JSON 结果以供进一步分析
hopp test api-collection.json \
  --reporter-json results.json

# 生成 JUnit XML 用于 Jenkins/GitLab 集成
hopp test api-collection.json \
  --reporter-junit junit-report.xml

# 生成加密安全的密钥
JWT_SECRET=$(openssl rand -hex 64)
REFRESH_TOKEN_SECRET=$(openssl rand -hex 64)
SESSION_SECRET=$(openssl rand -hex 64)

# 使用生产值更新 .env
cat >> .env << EOF
# 安全
JWT_SECRET=${JWT_SECRET}
REFRESH_TOKEN_SECRET=${REFRESH_TOKEN_SECRET}
SESSION_SECRET=${SESSION_SECRET}
TOKEN_SALT_COMPLEXITY=10

# 速率限制（如果在反向代理后）
RATE_LIMIT_TTL=60
RATE_LIMIT_MAX=100

# CORS（限制为你的域名）
ALLOWED_ORIGINS=https://api.yourcompany.com
EOF

# /etc/nginx/sites-available/hoppscotch
server {
    listen 443 ssl http2;
    server_name api-tools.yourcompany.com;

    ssl_certificate /etc/letsencrypt/live/yourcompany.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/yourcompany.com/privkey.pem;

    location / {
        proxy_pass http://localhost:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

server {
    listen 443 ssl http2;
    server_name hoppscotch-admin.yourcompany.com;

    ssl_certificate /etc/letsencrypt/live/yourcompany.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/yourcompany.com/privkey.pem;

    location / {
        proxy_pass http://localhost:3100;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

# docker-compose.monitoring.yml
version: "3.8"

services:
  prometheus:
    image: prom/prometheus:latest
    volumes:
      - ./prometheus.yml:/etc/prometheus/prometheus.yml
      - prometheus_data:/prometheus
    ports:
      - "9090:9090"
    networks:
      - hoppscotch-net

  grafana:
    image: grafana/grafana:latest
    ports:
      - "3001:3000"
    volumes:
      - grafana_data:/var/lib/grafana
    networks:
      - hoppscotch-net

volumes:
  prometheus_data:
  grafana_data:

networks:
  hoppscotch-net:
    external: true

#!/bin/bash
# backup-hoppscotch.sh - 通过 cron 每日运行

BACKUP_DIR="/backups/hoppscotch"
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
DB_CONTAINER="hoppscotch-db"
DB_NAME="hoppscotch"
DB_USER="hoppscotch"

mkdir -p "${BACKUP_DIR}"

# PostgreSQL 转储
docker exec ${DB_CONTAINER} pg_dump \
  -U ${DB_USER} \
  -d ${DB_NAME} \
  -F custom \
  -f "/tmp/hoppscotch_${TIMESTAMP}.dump"

# 从容器复制到主机
docker cp "${DB_CONTAINER}:/tmp/hoppscotch_${TIMESTAMP}.dump" \
  "${BACKUP_DIR}/hoppscotch_${TIMESTAMP}.dump"

# 压缩并加密
gzip "${BACKUP_DIR}/hoppscotch_${TIMESTAMP}.dump"

# 仅保留最近 14 天
find "${BACKUP_DIR}" -name "hoppscotch_*.dump.gz" -mtime +14 -delete

echo "备份完成: hoppscotch_${TIMESTAMP}.dump.gz"