You use a generator to automatically convert that spec to boilerplate code. But then you have to add business logic, authentication and so on.

When the API spec change, what do you do? Do you re run the generator? If not, how can you enforce your code is compliant with the spec?