fix: Scope auth to swagger endpoints

rswag-ui/lib/rswag/ui/configuration.rb

@@ -1,4 +1,5 @@
 require 'ostruct'
+require 'rack'
 
 module Rswag
   module Ui

rswag-ui/lib/rswag/ui/engine.rb

@@ -1,5 +1,29 @@
 require 'rswag/ui/middleware'
 
+class UiBasicAuth < ::Rack::Auth::Basic
+  def call(env)
+    return @app.call(env) unless env_matching_path
+
+    super(env)
+  end
+
+  private
+
+  def env_matching_path
+    swagger_endpoints = Rswag::Ui.config.swagger_endpoints[:urls]
+    swagger_endpoints.find do |endpoint|
+      base_path = base_path(endpoint[:url])
+      env_base_path = base_path(env['PATH_INFO'])
+
+      base_path == env_base_path
+    end
+  end
+
+  def base_path(url)
+    url.downcase.split('/')[1]
+  end
+end
+
 module Rswag
   module Ui
     class Engine < ::Rails::Engine
@@ -10,7 +34,7 @@ module Rswag
 
         if Rswag::Ui.config.basic_auth_enabled
           c = Rswag::Ui.config
-          app.middleware.use ::Rack::Auth::Basic do |username, password|
+          app.middleware.use UiBasicAuth do |username, password|
             c.config_object[:basic_auth].values == [username, password]
           end
         end