diff --git a/src/Leanetec.EConnect.Proxy/Program.cs b/src/Leanetec.EConnect.Proxy/Program.cs index 5b6e4a1..f805aef 100644 --- a/src/Leanetec.EConnect.Proxy/Program.cs +++ b/src/Leanetec.EConnect.Proxy/Program.cs @@ -32,8 +32,13 @@ try app.UseMiddleware(); + bool useSwagger = config.GetValue("UseSwagger"); + if(useSwagger) + app.Services.GetRequiredService>() + .LogWarning("Swagger UI is enabled. Using Swagger in a production environment may expose sensitive API information and pose security risks."); + // Configure the HTTP request pipeline. - if (app.Environment.IsDevelopment()) + if (app.Environment.IsDevelopment() || useSwagger) { app.UseSwagger(); app.UseSwaggerUI(); diff --git a/src/Leanetec.EConnect.Proxy/appsettings.json b/src/Leanetec.EConnect.Proxy/appsettings.json index 494dcb3..9a40f22 100644 --- a/src/Leanetec.EConnect.Proxy/appsettings.json +++ b/src/Leanetec.EConnect.Proxy/appsettings.json @@ -5,6 +5,7 @@ "Microsoft.AspNetCore": "Warning" } }, + "UseSwagger": true, "AllowedHosts": "*", "EConnect": { "BaseAddress": "https://portal.demoportal01.leanetec.com",