search

quarkusio / quarkus

Quarkus: Supersonic Subatomic Java.
https://quarkus.io
Apache License 2.0
13.4k stars 2.57k forks source link

Endpoints for Authentication (OIDC) do not (they should) appear in swagger #26015

Open StephenOTT opened 2 years ago

StephenOTT commented 2 years ago

Description

When you implement the OIDC extension and configure endpoints such as /logout (quarkus.oidc.logout.path) the endpoints do not appear in swagger ui (and in DevUI Swagger UI).

Implementation ideas

The endpoints should be shown in swagger as they are live/active endpoints

quarkus-bot[bot] commented 2 years ago

/cc @MikeEdgar, @pedroigor, @phillip-kruger, @sberyozkin

phillip-kruger commented 2 years ago

@sberyozkin w.d.y.t ? If you agree that this is a good idea we can easily add this. Maybe turned off by default, but can be enabled via config (that is how Health Endpoints work)

phillip-kruger commented 2 years ago

@sberyozkin ^^^

sberyozkin commented 1 year ago

Hi @phillip-kruger Sorry for the delay, but will Swagger UI be able to logout the user if this endpoint is clicked ? As far as I recall, Swagger UI is not integrated with the OIDC web-app application type. i.e, Swagger UI can authenticate the users itself but not by delegating to OIDC web-app

phillip-kruger commented 1 year ago

Well, If there is a URL that can be used by the user (like /logout in the example given) then all that this all do is make that URL available (list it) in OpenAPI (and then also Swagger UI)