[Laravel]: Fix authorization swagger ui

[toitzi]

Q	A
Branch?	4.0
Tickets	Closes #6662
License	MIT
Doc PR	#1991

[soyuka]

Nice! Tyvm! Would you be able to squash your commits and reword it and follow the convetional commits? See https://github.com/api-platform/core/blob/main/CONTRIBUTING.md#sending-a-pull-request it'd could be like this: feat(laravel): swagger UI authorization configuration.

Thanks!

[toitzi]

@soyuka yes, once im done i will squash commit.

Different question:
currently bearer tokens are not really supported by api-platform (or at least not fully). There is 2 issues i see when adding bearer token support:

First way / issue, would be adding the option to pass a auth key type via the OpenApiFactory, by adapting this code. It is a non-breaking change (and the way i did it in this PR). But the drawback here is that api-platform already uses type in the configuration, which maps to the in of the security scheme. Since that is already in use, so i had to come up with a new option auth_type. While that works just fine, i can see how this can be confusing to developers / maintainers.

Second way (which removes this confusion a bit) would be to adapt the Options file, with a new property and method (getHttpAuth or smth. like that). And use that additionally in the OpenApiFactory:

That would be more consistent tbh.

However to avoid breaking changes in the Options Class, i would need to append those values at the end of the constructor.

What would be the preferred way here?

[toitzi]

And also: Is this a feature or a bug? Since it is already somewhat implemented but not really working in laravel - i considered it a bug...if you consider it a feature please let me know (because i think i will also need to merge it to a differen branch then right?)

[soyuka]

I see 2 different things here. For Laravel we consider that every existing feature that is missing as a bug fix for 4.x and therefore the config patch is fine. For the new option (http auth) I'd see this as a new feature as it changes in Symfony as well. I'd open a new PR to support this.

[toitzi]

ok updated to fix only the config, i will make a new PR as feature to support http auth.

[soyuka]

Many thanks!