Basic auth in swagger end points for downstream server

[Amardeep08]

Anyway to enforce basic authentication to swagger endpoints for downstream servers?
Swagger endpoints are protected with basic auth.
Achieved this in ocelot with delegating handler..
But in swagger...unable to do it?

[Burgyn]

Hi,
I'm sorry but I don't quite understand your question.

Could you please be more specific? Can you please describe the more detailed behavior you expect. Ideal if you make a simple example to demonstrate this.

Thanks.

[Burgyn]

Hi,

the only thing I can think of is to use DownstreamSwaggerHeaders option.

app.UseSwaggerForOcelotUI(opt => {
  opt.DownstreamSwaggerHeaders = new[]
  {
      new KeyValuePair<string, string>("Auth-Key", "AuthValue"),
  };
})

These headers will be used when requesting the downstream swagger endpoint.

[jariahh]

@Burgyn I'm trying to get it to pass along my bearer token while making the request for the json. As each of my downstream services will use the token to provide the correct json back based on your authentication level. How can I achieve this. The downstream Swagger Headers looked promising, but I think It would be new KeyValuePair<string, string>("Authorization", "Bearer {dynamic token goes here}")

[Burgyn]

Hi @jariahh
What exactly you want to authorize? Accessing swagger json or your downstream resource API endpoints?

[jariahh]

Hey @Burgyn the downstream end points are already working with authorization, just the actual call to get the swagger json doesn't appear to be getting the bearer token.

[Burgyn]

Hi @jariahh,

try looking at this #83