Auth Error, Error: Bad Request

Q&A (please complete the following information)

• OS: macOs
• Browser: chrome
• Version: 69
• Method of installation: npm
• Swagger-UI version: ? swagger-ui-express 3.0.1 comes with a static directory with swagger ui.
• Swagger/OpenAPI version: 2

Content & configuration

Example Swagger/OpenAPI definition:

securityDefinitions:
  oauth:
    type: oauth2
    tokenUrl: /oauth/token
    flow: application
security:
  - oauth: []

Swagger-UI configuration options:

// Configure Swagger Docs
let swaggerDocument = yaml.safeLoad(fs.readFileSync('./api/swagger/swagger.yaml', 'utf8'));
app.use('/docs', swaggerUi.serve, swaggerUi.setup(swaggerDocument));

Describe the bug you’re encountering

I am no longer able to authentication through live docs. Debugging the POST request to /oauth/token via chrome devtools shows that the client_id and client_secret are not being send. grant_type is and is the correct value “client_credentials”.

To reproduce…

Steps to reproduce the behavior:

1. Go to /docs (my configured router for swagger ui via express)
2. Click on ‘Authenticate’
3. Enter ‘client_id’
4. Enter ‘client_secret’
5. Click modal ‘Authenticate’ button, which submits the form
6. See error

Expected behavior

Should authenticate

Screenshots

Additional context or thoughts

I know that the yaml config for OAuth2 is being consumed because its giving me the OAuth2 authentication form. The break down is in sending the entered credentials.

[shockey]

@pacey, can you email me about this? I have a branch here, I’d like for you to take a look and tell me if it addresses your use case. [e-mail].

[bozzltron]

Thanks for the clarification here. For future readers the basic authorization header is constructed by base 64 encoded a string that contains client_id and client_secret and is delimited by “:”.