Firebase Google Auth in Swagger（swashbuckle.aspnetcore）

Question

试图在Swagger

Onboard：Asp.net Core 5，swashbuckle.aspnetcore 6.3.1， 在Fairbase Console＆gt;身份验证＆GT;登录方法＆gt;通过Google进行的身份验证是

在ServiceConfigure方法上启用的：

services.AddSwaggerGen(c =>
        {
            c.SwaggerDoc("v1", new OpenApiInfo { Title = "MyApi", Version = "v1" });
            c.UseInlineDefinitionsForEnums();
            
            c.AddSecurityDefinition("oauth2", new OpenApiSecurityScheme
            {
                Type = SecuritySchemeType.OAuth2,
                Flows = new OpenApiOAuthFlows
                {
                    //email and password authentication - works fine
                    Password = new OpenApiOAuthFlow 
                    {
                        TokenUrl = new Uri("/api/v1/auth/password", UriKind.Relative), //here my backend endpoint
                        Extensions = new Dictionary<string, IOpenApiExtension>
                        {
                            { "returnSecureToken", new OpenApiBoolean(true) },
                        },
                    },
                    //try add google auth - troble here
                    Implicit = new OpenApiOAuthFlow()
                    {
                        //Not sure about the endpoints. Its not work with 404 err
                        AuthorizationUrl = new Uri("https://securetoken.google.com/MY-PROJECT-FIREBASE-NAME"),
                        TokenUrl = new Uri("https://securetoken.google.com/MY-PROJECT-FIREBASE-NAME"),
                        Scopes = new Dictionary<string, string>
                        {                                
                            { "profile", "profile" },

                        }                            
                    }
                }
            });
            c.OperationFilter<AuthorizeCheckOperationFilter>();
        });

类过滤器：

public class AuthorizeCheckOperationFilter : IOperationFilter
{
    public void Apply(OpenApiOperation operation, OperationFilterContext context)
    {
        var requiredScopes = context.MethodInfo.DeclaringType.GetCustomAttributes(true)
            .OfType<AuthorizeAttribute>()
            .Select(attr => attr.Policy)
            .Distinct();

        if (requiredScopes.Any())
        {

            var oAuthScheme = new OpenApiSecurityScheme
            {
                Reference = new OpenApiReference { Type = ReferenceType.SecurityScheme, Id = "oauth2" }
            };

            operation.Security = new List<OpenApiSecurityRequirement>
            {
                new OpenApiSecurityRequirement
                {
                    [ oAuthScheme ] = requiredScopes.ToList()
                }
            };
        }
    }
}

在配置方法中：

app.UseSwagger();
app.UseSwaggerUI(c => c.SwaggerEndpoint("/swagger/v1/swagger.json", "MyApi v1");

授权的端点 / tokenurl应该致电哪些端点？ 有什么swagger的附加选项吗？ 我是Firebase的新手。 MB需要在Firebase控制台中进行宣传调整吗？ 我将非常感谢代码样本。

Answer 1

我为您找到了一个很好的回购。这个简单的是.NET 5 WebAPI项目基础，其实现了以下功能：

用firebase登录摇晃
Serilog记录到Amazon CloudWatch
AppSettings中的加密字段
软删除和审核列
多重支持
数据播种
本地化

代码示例：