Setting up auth for OpenAPI

[Just-Drue]

Hi, a bit confused on what's the proper way to add auth to openapi endpoints?

[luolingchun]

Here's an example of a project (flask-api-demo) for you to refer to:

1. Define auth: https://github.com/luolingchun/flask-api-demo/blob/master/src/app/config.py#L51-L60
2. Use auth: https://github.com/luolingchun/flask-api-demo/blob/master/src/app/api/user.py#L21

[puittenbroek]

That is the documentation part. Authentication is usually done via decorators. One of the issues this project has, is that is causes the incoming payload to be validated before any decorators (auth..) being applied.

That is quite a dangerous approach. You want to be able to do auth first.