How to implement Authorization in Swagger

To implement JWT authorization in Swagger, you can follow the below steps:

1. Install Swashbuckle package using NuGet package manager.
2. Add the below code in the SwaggerConfig.cs file

   public static void Register()
   {
       GlobalConfiguration.Configuration
           .EnableSwagger(c =>
               {
                   // Add the Swagger authentication filter
                   c.OperationFilter();
   
                   // Set the security definition
                   c.SwaggerDoc("v1", new Info { Title = "My API", Version = "v1" });
                   c.AddSecurityDefinition("Bearer", new ApiKeyScheme
                   {
                       In = "header",
                       Description = "Please enter JWT with Bearer into field",
                       Name = "Authorization",
                       Type = "apiKey"
                   });
               })
           .EnableSwaggerUi(c =>
               {
                   c.DocumentTitle("My API");
                   c.InjectJavaScript(Assembly.GetExecutingAssembly(), "MyAPI.Scripts.Swagger.js");
               });
   }
   

3. Create a SwaggerAuthorizationFilter.cs file with the below code:

   public class SwaggerAuthorizationFilter : IOperationFilter
   {
       public void Apply(Operation operation, SchemaRegistry schemaRegistry, ApiDescription apiDescription)
       {
           // Get the Authorization attributes
           var authAttributes = apiDescription.GetControllerAndActionAttributes().ToList();
   
           // Add the Authorization header
           if (authAttributes.Any())
           {
               operation.parameters.Add(new Parameter
               {
                   name = "Authorization",
                   @in = "header",
                   description = "JWT Authorization header using the Bearer scheme. Example: \"Bearer {token}\"",
                   required = true,
                   type = "string",
                   @default = "Bearer "
               });
           }
       }
   }
   

4. Use the [Authorize] attribute on the controller or action method to enable JWT authorization.
5. In the Swagger UI, click on the "Authorize" button and enter the JWT token in the "Value" field using the "Bearer {token}" format.

6. This should enable JWT authorization in Swagger for your APIs.

7. Click the "Authorize" button to authorize the request with the JWT token.

https://mattfrear.com/2017/04/27/add-an-authorization-header-to-your-swagger-ui-with-swashbuckle/

Hi Jignesh,

I need it for .Net framework and not core.

Hello Rohan,

Please refer ,

https://www.c-sharpcorner.com/article/authentication-authorization-using-net-core-web-api-using-jwt-token-and/
https://www.infoworld.com/article/3650668/implement-authorization-for-swagger-in-aspnet-core-6.html

https://code-maze.com/swagger-authorization-aspnet-core/