How to use Api_Key instead of JWT

I’m trying to use Api_Key which is specified in header. My swagger settings are great i followed the documentation of FastEndpoints. What confuses me is the authentication part. It keeps saying I’m not authorized. I just want the user to use the API key to authenticate there is no login endpoint in my security.

My code:

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddFastEndpoints();

builder.Services
    .AddSwaggerDoc(s =>
    {
        s.DocumentName = "Initial Release";
        s.Title = "My API";
        s.Version = "v1.0";
        s.AddAuth("ApiKey", new()
        {
            Type = OpenApiSecuritySchemeType.ApiKey,
            Name = "api_key",
            In = OpenApiSecurityApiKeyLocation.Header,
            Description = "Fill in your Api Key"
        });
    }, addJWTBearerAuth: false);

var app = builder.Build();
app.UseAuthorization();
app.UseFastEndpoints();

app.UseOpenApi();

app.UseSwaggerUi3(c => c.ConfigureDefaults());

app.Run("http://localhost:3000");

Exception i receive: System.InvalidOperationException: No service for type 'Microsoft.AspNetCore.Authentication.IAuthenticationService' has been registered.

Even when i add app.UseAuthentication(); its not working.

What am i doing wrong?

[EthemAcar-Dev]

There’s one thing I don’t understand, though. Since .UseSwaggerGen() is used after calling .UseAuthorization() it means the /swagger web page needs authentication too. So, the only way to access the docs is to manually edit the API key header. Can you make the swagger document accessible anonymously?

Swagger is anonymously accessible with the provided demo code.

[dj-nitehawk]

updated the code above. works now. basically you need a custom policy to turn off authorization. earlier it seems like i forgot to reload/refresh swagger ui when testing. my bad 😉