OAuth 2 with authorization code flow uses wrong callback url

[dinamic]

Q&A (please complete the following information)

• OS: macOS
• Browser: chrome
• Version: 67
• Method of installation: none
• Swagger-UI version: current online version
• Swagger/OpenAPI version: both Swagger 2.0 and OpenAPI 3.0

Describe the bug you're encountering

We have OAuth2 authorization code flow implemented. Our API documentation is build using OpenAPI v3. Using https://editor.swagger.io/ does not work for us, because there is a bug with the callback url.

Swagger Editor should either provide means to change the callback url required or should at least get it right.

Expected: https://editor.swagger.io/oauth2-redirect.html
Actual: http://localhost:3200/oauth2-redirect.html

Expected behavior

Using OAuth2 with authorization code flow should work while using https://editor.swagger.io/.

[stev333]

Came across this as well and was able to resolve locally. The problem appears to be that http://localhost:3200/oauth2-redirect.html is somewhat coded into the server as redirect and not relative to host so the hosted versions will also attempt to redirect to localhost.

How to solve it locally:

• Go to https://github.com/swagger-api/swagger-ui/tree/master/dev-helpers and copy paste oauth2-redirect.html into the root of your editor (I was not able to find this file in the Editor repo)
• Before starting up change the ports for 'open-static' and 'server-static' from 3001 to 3200 (package.json)
• you might need to allow CORS for the redirect to work

i guess this doesn't solve the issue for the hosted version but might help

[anbusurendhar]

Experienced the same issue. I am using swagger UI.

By default the application is configured to run on port 3002 in package.json, but in swagger-config.yaml config file oauth2RedirectUrl is pointed to port 3200.

After some research, I came with this solution and it worked for me. Hope this would help.

const ui = SwaggerUIBundle({
        url: "/swagger.json",
        dom_id: '#swagger-ui',
        deepLinking: true,
        filter:false,
        presets: [
          SwaggerUIBundle.presets.apis
        ],
        plugins: [
          SwaggerUIBundle.plugins.DownloadUrl
        ],
        oauth2RedirectUrl:"http://localhost:3002/oauth2-redirect.html",
      });

[mokanfar]

There is no solution to using their online editor to jump right in without running this locally?
https://editor.swagger.io/