how do I expose swagger docs without requiring a JWT bearer token for authorization

[tonykgill]

Hi folks,

I'm new to aws lambda powertools for python, and relatively new to Lambda in general. I really like powertools. A recently added feature allows us to create a swagger endpoint for docs. This is great.

But... our APIs require a JWT bearer token for authorization. What's the recommended method for exposing the docs without requiring the JWT token?

The same point was raised here. But I can't find a resolution as yet across the other issues and discussions.

Thanks

[tonykgill]

I have a solution. I can create a new /swagger endpoint in my API Gateway, which doesn't require authentication, and integrate it with a different Lambda function. Calls to the /swagger endpoint show the docs. Of course the 'try it' button fails without auth. But I think I have what I need for now, which was just to expose the docs.

[leandrodamascena]

Hello @tonykgill! Today was a very busy day and I couldn't reply here.

You're right, it goes straight to what you thought: an endpoint without authentication.

Tomorrow morning I'll left some more considerations and explain how it works in API Gateway.

Thanks

[tonykgill]

Awesome. Thank you @leandrodamascena.