Using Authorization annotation in JAVA

Hi,

We’ve defined a yaml file with Swagger version 2.0 with the following security definitions:

securityDefinitions:
  UserNameSecurity:
    type: apiKey
    in: header
    name: X-API-USERNAME
  PasswordSecurity:
    type: apiKey
    in: header
    name: X-API-PASSWORD
  TenantSecurity:
    type: apiKey
    in: header
    name: X-API-TENANT
    
security:
- UserNameSecurity: []
- PasswordSecurity: []
- TenantSecurity: []

After compiling it using Swagger JAVA compiler version 2.2.3 we see the security labels as annotations in all the operation, but we can’t access the values entered for them in the request header. @io.swagger.annotations.Authorization(value = “PasswordSecurity”), @io.swagger.annotations.Authorization(value = “TenantSecurity”), @io.swagger.annotations.Authorization(value = “UserNameSecurity”)

Do you know how can the apiKey values, supplied in the header, can be accessed in the generated code?

Thanks, Kfir

[orubel]

In the words of Darrel Miller, the lead on OpenAPI, let me send you this link: https://www.flickr.com/photos/orubel/50695726007/in/dateposted-public/

[orubel]

@kfirisrael One of the issues you will run into is that OpenApi doesn’t allow for an association of ROLE with endpoint; this causes endpoints to show same request data/response data regardless of ROLE. In other words, if you were to build a Swagger doc from this, an ADMIN role and a USER role would see the EXACT SAME ENDPOINTS and request them the EXACT SAME WAY!!!

There is no way to extend this because the association has to be directly tied to the endpoint (not be in a separate extension where the association is lost)