Protected auth methods are exposed in the /apis/.../swagger endpoint

Haufe-Lexware / wicked.haufe.io

An API Management system based on Mashape Kong

http://wicked.haufe.io

Other

123 stars 37 forks source link

Protected auth methods are exposed in the /apis/.../swagger endpoint #198

Closed DonMartin76 closed 5 years ago

DonMartin76 commented 5 years ago

In case you are using "protected" auth methods, these are currently inadvertently exposed in the /apis/.../swagger endpoint, thus are offered for use in the Swagger UI. This should quite obviously not be the case.