Even if OAuth security is configured on top level, the API endpoints (/swagger.json and /ui) are not secured.
How can these endpoints be secured? It is a bit of a problem that they are not secured at the moment.
I have the same issue. I think I can work around it with a before_request method, but it seems like there has to be a better way.
Most helpful comment
I have the same issue. I think I can work around it with a before_request method, but it seems like there has to be a better way.