-
Notifications
You must be signed in to change notification settings - Fork 3.5k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fix Missing antiforgery token on swagger
- Loading branch information
1 parent
f1d669a
commit a9f57d5
Showing
2 changed files
with
76 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
75 changes: 75 additions & 0 deletions
75
framework/src/Volo.Abp.Swashbuckle/wwwroot/swagger/ui/index.js
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,75 @@ | ||
//Copy from https://github.com/domaindrivendev/Swashbuckle.AspNetCore/blob/master/src/Swashbuckle.AspNetCore.SwaggerUI/index.js | ||
|
||
/* Source: https://gist.github.com/lamberta/3768814 | ||
* Parse a string function definition and return a function object. Does not use eval. | ||
* @param {string} str | ||
* @return {function} | ||
* | ||
* Example: | ||
* var f = function (x, y) { return x * y; }; | ||
* var g = parseFunction(f.toString()); | ||
* g(33, 3); //=> 99 | ||
*/ | ||
function parseFunction(str) { | ||
if (!str) return void (0); | ||
|
||
var fn_body_idx = str.indexOf('{'), | ||
fn_body = str.substring(fn_body_idx + 1, str.lastIndexOf('}')), | ||
fn_declare = str.substring(0, fn_body_idx), | ||
fn_params = fn_declare.substring(fn_declare.indexOf('(') + 1, fn_declare.lastIndexOf(')')), | ||
args = fn_params.split(','); | ||
|
||
args.push(fn_body); | ||
|
||
function Fn() { | ||
return Function.apply(this, args); | ||
} | ||
Fn.prototype = Function.prototype; | ||
|
||
return new Fn(); | ||
} | ||
|
||
window.onload = function () { | ||
var configObject = JSON.parse('%(ConfigObject)'); | ||
var oauthConfigObject = JSON.parse('%(OAuthConfigObject)'); | ||
|
||
// Workaround for https://github.com/swagger-api/swagger-ui/issues/5945 | ||
configObject.urls.forEach(function (item) { | ||
if (item.url.startsWith("http") || item.url.startsWith("/")) return; | ||
item.url = window.location.href.replace("index.html", item.url).split('#')[0]; | ||
}); | ||
|
||
// If validatorUrl is not explicitly provided, disable the feature by setting to null | ||
if (!configObject.hasOwnProperty("validatorUrl")) | ||
configObject.validatorUrl = null | ||
|
||
// If oauth2RedirectUrl isn't specified, use the built-in default | ||
if (!configObject.hasOwnProperty("oauth2RedirectUrl")) | ||
configObject.oauth2RedirectUrl = (new URL("oauth2-redirect.html", window.location.href)).href; | ||
|
||
// Apply mandatory parameters | ||
configObject.dom_id = "#swagger-ui"; | ||
configObject.presets = [SwaggerUIBundle.presets.apis, SwaggerUIStandalonePreset]; | ||
configObject.layout = "StandaloneLayout"; | ||
|
||
// Parse and add interceptor functions | ||
var interceptors = JSON.parse('%(Interceptors)'); | ||
if (interceptors.RequestInterceptorFunction) | ||
configObject.requestInterceptor = parseFunction(interceptors.RequestInterceptorFunction); | ||
if (interceptors.ResponseInterceptorFunction) | ||
configObject.responseInterceptor = parseFunction(interceptors.ResponseInterceptorFunction); | ||
|
||
if (configObject.plugins) { | ||
configObject.plugins = configObject.plugins.map(eval); | ||
} | ||
|
||
// Begin Swagger UI call region | ||
|
||
const ui = abp.SwaggerUIBundle(configObject); | ||
|
||
ui.initOAuth(oauthConfigObject); | ||
|
||
// End Swagger UI call region | ||
|
||
window.ui = ui | ||
} |