Swashbuckle.webapi: Swashbuckle 5.0 and Password Grant Flow

[remiplanglois]

There is documentation on how to authenticate request with the Implicit Grant Flow but not with the Password Grant Flow. Based on the doc for the implicit grant I've enable swagger like this

Swashbuckle.Application.SwaggerEnabledConfiguration sec = config.EnableSwagger(c =>
      {
        c.SingleApiVersion("v1", "MyApi");

        c.OAuth2("oauth2")
          .Description("OAuth2 Password Grant")
          .Flow("password")
          .Scopes(scopes => { scopes.Add("read", "Read access to protected resources"); })
          .TokenUrl("http://localhost:51398/OAuth/token");
        c.OperationFilter<AssignOAuth2SecurityRequirements>();

        c.IncludeXmlComments(System.String.Format(@"{0}\bin\MyApi.XML", System.AppDomain.CurrentDomain.BaseDirectory));
      });

      sec.EnableSwaggerUi();

I took the "AssignOAuth2SecurityRequirements" extension under SwahsBuckle.Dummy.Core.
Is there any other extensions needed for the Password Flow?

[domaindrivendev]

As far as I can tell, the OAuth2 "Password flow" is not currently supported by the swagger-ui

https://github.com/swagger-api/swagger-ui/issues/807

So, you can describe it in the spec (as you appear to be doing above) but you won't get any of the additional UI goodness. But, SB does allow you to a) inject your own JavaScript or b) inject your own version of index.html so if you were willing, you could theoretically build in the UI workflow yourself ...

[tjoudeh]

Hi @domaindrivendev is this still not available yet? I was hoping to be able to support this flow on the UI level too.

[rexthuhking]

@domaindrivendev I second the request by @tjoudeh this will be a much appreciated feature.

[ciscocabe]

I just develop my web api documentation using swashbuckle 5 but I think I will use another previous version because I need this feature.

[rifaj]

@domaindrivendev @tjoudeh Any update on this?

[pdusen]

@domaindrivendev It looks like Password Flow support has landed in swagger-ui Master: https://github.com/swagger-api/swagger-ui/pull/2397

Are there any changes that need to be done in Swashbuckle to include this?

[pdusen]

@domaindrivendev I'd appreciate a response to my comment above.

[felschr]

This would interest me, too.

[lookwhatisee]

I am also interested in the latest version of swagger ui. I believe the current version is 3.0.9 and seems to add additional support for the OAuth forms.

[simongymer]

Does anyone have some documentation on how to implement password flow in .NET Framework (rather than .NET Core).