Updated the comments around client secret.

domaindrivendev · Jun 26, 2022 · f9e09be · f9e09be
1 parent 23fe15d
commit f9e09be
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/src/Swashbuckle.AspNetCore.SwaggerUI/SwaggerUIOptions.cs b/src/Swashbuckle.AspNetCore.SwaggerUI/SwaggerUIOptions.cs
@@ -192,6 +192,7 @@ public class OAuthConfigObject
         /// <summary>
         /// Default clientSecret
         /// </summary>
+        /// <remarks>Setting this exposes the client secrets in inline javascript in the swagger-ui generated html.</remarks>
         public string ClientSecret { get; set; } = null;
 
         /// <summary>

diff --git a/src/Swashbuckle.AspNetCore.SwaggerUI/SwaggerUIOptionsExtensions.cs b/src/Swashbuckle.AspNetCore.SwaggerUI/SwaggerUIOptionsExtensions.cs
@@ -236,8 +236,9 @@ public static void OAuthUsername(this SwaggerUIOptions options, string value)
         /// </summary>
         /// <param name="options"></param>
         /// <param name="value"></param>
+        /// <remarks>Setting this exposes the client secrets in inline javascript in the swagger-ui generated html.</remarks>
         public static void OAuthClientSecret(this SwaggerUIOptions options, string value)
-        {
+        { 
             options.OAuthConfigObject.ClientSecret = value;
         }