OpenIdConnect and cookie

[rfcdejong]

#As of OpenAPI Specification 3.0 it is possible to use more authentication methods, in ASP.NET Core it is easy to AddAuthentication with OpenIdConnect and AddCookie. As swashbuckle is not supporting 3.0 I'm looking at NSwag. Is it possible to use NSwag and use cookie-authentication?

https://swagger.io/docs/specification/authentication/
https://swagger.io/docs/specification/authentication/cookie-authentication/

and use OpenIdConnect discovery?
https://swagger.io/docs/specification/authentication/openid-connect-discovery/

[RicoSuter]

ATM auth support is limited, but you can add the required settings in PostProcess or with an own processor: https://github.com/RSuter/NSwag/wiki/Document-Processors-and-Operation-Processors

[RicoSuter]

The answer before is just to change the spec for your needs. Maybe we also have to add more settings to configure the Swagger UI for that...,

[rfcdejong]

I think I'll spend some time into NSwag and see how far I can get with it. With "we" you mean that there is no own processor or custom html template to use as override as in "me" to do so in the UI? :)

[RicoSuter]

There is a processor to add scopes:
https://github.com/RSuter/NSwag/blob/master/src/NSwag.SwaggerGeneration/Processors/Security/OperationSecurityScopeProcessor.cs

But there is not processor to add auth infos except this one (Swagger 2.0 only?): https://github.com/RSuter/NSwag/blob/master/src/NSwag.SwaggerGeneration/Processors/Security/SecurityDefinitionAppender.cs

And maybe we have to add more UI configuration settings: https://github.com/RSuter/NSwag/blob/master/src/NSwag.AspNetCore/SwaggerUi3Settings.cs#L36

[rfcdejong]

I'm not sure if the cookie authentication even works on swagger-ui by OAS v3 itself looking at this issue swagger-api/swagger-js#1163