Available authorizations empty

[KieranFoot]

I am using C# 8 with Swashbuckle.AspNetCore.Swagger, Swashbuckle.AspNetCore.SwaggerGen & Swashbuckle.AspNetCore.Annotations at version 6.5.0

Using what seems to be appropriate configuration (documentation is terrible), I have implemented OpenId as an authorization method for swagger UI as below;

var identityServerUrl = builder.Configuration.GetServiceUrl("identity-server").TrimEnd('/');
var docUri = new Uri($"{identityServerUrl}/.well-known/openid-configuration");
            
options.AddSecurityDefinition("OpenId", new OpenApiSecurityScheme
{
    Name = "OpenId Connect",
    Type = SecuritySchemeType.OpenIdConnect,
    OpenIdConnectUrl = docUri
});
            
options.AddSecurityRequirement(new OpenApiSecurityRequirement
{
    {
        new OpenApiSecurityScheme
        {
            Reference = new OpenApiReference { Type = ReferenceType.SecurityScheme, Id = "OpenId" }
        }, []
    }
});

I also set the ClientId and ClientSecret inside the UseSwaggerUI options as below (Secret has been redacted);

app.UseSwaggerUI(options =>
{           
    options.OAuthAppName("API Explorer");
    options.OAuthClientId("swagger");
    options.OAuthClientSecret("REDACTED");
    options.OAuthScopes(["openid", "profile", "email", "offline_access", "tenant", "PublicApi"]);
});

However, when running, the Swagger UI has no available authorizations (as shown below). I cannot find any documentation or example code on how to implement this. I have tried many suggestions from stackoverflow with no success, so I'm assuming there is either a bug or you need to update/add documentation covering OpenId.

[martincostello]

Do either of these comments help?

• Authorization Bearer token with version 3.0.0 #971 (comment)
• OAuth2 Implicit not working with AzureAD id_token #1235 (comment)

Alternatively, if you add a custom Swagger index.html that uses the latest version of swagger-ui, does that fix it? I have #2806 open to update the version of SwaggerUI we repackage.

[KieranFoot]

@martincostello I moved to OAuth that just uses the openid scope.

I still think there needs to be a working example of using OpenId as I tried to do, since it's not clear how to get it working.

[amranmo1]

I face similar issue, this is due to CORS. whitelist the client IP in the server and you will get it populated.
however I faced another issue in the callback page with this error

AuthenticationFailureException: An error was encountered while handling the remote login.

[martincostello]

AuthenticationFailureException: An error was encountered while handling the remote login.

You'll have to look in your logs for more details. A common cause is correlation failure due to SameSite cookie settings.