OAuth2 Scopes do not render #235

Activity

1. mrin9 commented on Jun 16, 2020

   

   mrin9

   on Jun 16, 2020

   Collaborator

   More actions

   Not sure of what you are expecting in the UI.
   I could see the scopes in the UI under the AUTHENTICATION section
   https://mrin9.github.io/RapiDoc/examples/oauth.html#authentication
2. kamaydeo commented on Jun 16, 2020

   

   kamaydeo

   on Jun 16, 2020

   Last edited by kamaydeo

   Author

   More actions

   Have a look at AUTHORIZATIONS section
   
3. mrin9 commented on Jun 17, 2020

   

   mrin9

   on Jun 17, 2020

   Collaborator

   More actions

   thats not scopes those are the security needed by the operation and these seucrity must be defined under security-schemes

   for more info refer to #200 on how RapiDoc shows them
4. kamaydeo commented on Jun 17, 2020

   

   kamaydeo

   on Jun 17, 2020

   Author

   More actions

   I already have defined security and securitySchemes.

   security:
     - Bearer:
         - write:domain
         - admin
     - OAuth2:
         - write:domain
         - admin

   and

   components:
     securitySchemes:
       Bearer:
         type: apiKey
         description: |
           Bearer scheme uses static perpetual token and is less secure.
           Token has a `write:domain` or `admin` permission associated with it.
           It determines whether you are authorized to invoke a particular operation or not.
         in: header
         name: Authorization
       OAuth2:
         type: oauth2
         description: |
           OAuth2 scheme is  a safer and more secure way to give you access with a short-lived token.
         flows:
           clientCredentials:
             tokenUrl: https://...../oauth2/token
             scopes:
               'write:domain': Manage Services and Subscribers in your Domain
               admin: Manage Services and Subscribers in all Domains

   I would be nice to see what authorizations are available at the individual operation level (which either inherits from global security or operation level security
5. mrin9 commented on Jun 17, 2020

   

   mrin9

   on Jun 17, 2020

   Last edited by mrin9

   Collaborator

   More actions

   they should be shown at operation level on top-right corner of each operation (if you have defined them properly)

   
6. mrin9

   closed this as completedon Jun 17, 2020
7. kamaydeo commented on Jun 17, 2020

   

   kamaydeo

   on Jun 17, 2020

   Author

   More actions

   It does show up in the top right corner of the each operation but it doesn't contain scope information which could be overridden at the operation level by defining security attribute under responses. OAuth2 scopes add more details such as what permissions you need to have in order to invoke this operation. The top right corner just shows what security schemes are available.
8. mb1511

   added a commit that references this issue on Feb 23, 2021

   rapi-doc#235 Display operation scopes if defined in security scheme

   2e2bf8a