Swagger：授权令牌未传递到请求标头中

Question

我使用springfox 2.9.2我有这样的api：

@Api(tags = "Users")
@RestController
@RequestMapping("users")
public class UsersController {

    @ApiOperation(value = "Creates a user")
    @ApiResponses(value = {
            @ApiResponse(code = 201, message = "user created"),
            @ApiResponse(code = 401, message = "not authorized")})

    @PostMapping(value = "/add")
    public ResponseEntity addUser(@Valid @RequestBody UserDTO userDTO) {
...
}

女巫来自身份验证服务器。我尝试在swagger中首次调用此服务器，并将其传递给像上面这样的控制器请求。所以我做

@Bean
    public Docket api() {
        final String swaggerToken = "";
        return new Docket(DocumentationType.SWAGGER_2)
            @Bean
    public      .select()
                .apis(RequestHandlerSelectors.basePackage("com.mbv.coros.notification.controller"))
                .paths(PathSelectors.any())
                .build()
                .apiInfo(apiEndPointsInfo())
                .securitySchemes(Arrays.asList(securityScheme()))
                .securityContexts(Arrays.asList(securityContext()))
                .useDefaultResponseMessages(false);
    }

private SecurityScheme securityScheme() {
        GrantType grantType = new ResourceOwnerPasswordCredentialsGrant(AUTH_SERVER + "/token");

SecurityScheme oauth = new OAuthBuilder().name("spring_oauth")
                .grantTypes(Arrays.asList(grantType))
                .scopes(Arrays.asList(scopes()))
                .build();
        return oauth;

private SecurityContext securityContext() {
        return SecurityContext.builder()
                .securityReferences(defaultAuth())
                .build();
    }

    List<SecurityReference> defaultAuth() {
        AuthorizationScope authorizationScope
                = new AuthorizationScope("global", "accessEverything");
        AuthorizationScope[] authorizationScopes = new AuthorizationScope[1];
        authorizationScopes[0] = authorizationScope;
        return Lists.newArrayList(
                new SecurityReference("JWT", authorizationScopes));
    }

在Swagger ui上，授权调用成功返回了令牌，但它没有将令牌添加到请求头中。它会产生

curl -X GET "http://localhost:8080/users/get" -H "accept: */*" 

如果我像这样设置令牌：

.securitySchemes(Arrays.asList(apiKey()))
 private ApiKey apiKey() {
        return new ApiKey("JWT", AUTHORIZATION_HEADER, "header");
    }

Answer 1

据我所知，Swagger仅在您配置令牌时才使用令牌，并且配置是使用Swagger UI页面右上角的“授权”按钮完成的。

因此，理想情况是：

>

触发返回令牌的身份验证调用

复制令牌；点击“授权”按钮，将JWT令牌粘贴到“不记名”中

在此之后，所有后续调用都应使用此令牌，直到您按logout。