Skip to content

Persist authorization data across browser close/refresh for OpenAPI Swagger UI #4314

Closed
@nlykkei

Description

@nlykkei

Use case

Currently, each time the user refreshes the Swagger UI or closes the browser, the authorization data, e.g. OAuth 2.0 tokens, is lost, which forces the user to re-authenticate to call APIs.

While one may argue that transient authorization data is more secure, it's not a great user experience. Many web applications persist short-lived tokens.

The persistAuthorization option to Swagger UI persists the authorization data in local storage, so it remains across browser close/refresh:

https://swagger.io/docs/open-source-tools/swagger-ui/usage/configuration/#:~:text=persistAuthorization

Solution/User Experience

Provide an extra argument persist_authorization to enable_swagger()

Alternative solutions

No response

Acknowledgment

Metadata

Metadata

Type

No type

Projects

Status

Shipped

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions