Authentication with Open ID Connect response_type hardcoded to token ?

Q&A (please complete the following information)

• Swagger-UI version: 4.5.0
• Swagger/OpenAPI version: Swagger 2.0, OpenAPI 3.0

Swagger/OpenAPI definition:

@SecuritySchemes({
  @SecurityScheme(
    name = "OAuth2",
    type = SecuritySchemeType.OPENIDCONNECT,
    openIdConnectUrl = "https://url-to-well-known-config")
})

Swagger-UI configuration options:

window.onload = function() {
      // Begin Swagger UI call region
      const ui = SwaggerUIBundle({
        url: '/api/openapi.json',
        dom_id: '#swagger-ui'
      });
      // End Swagger UI call region
      ui.initOAuth({
        clientId: "XXXXXX",
        realm: "XXXXXXX",
        scopes: "openid"
      })
      window.ui = ui;
    };

How can we help?

The generate URL for the implicit flow hardcodes the response_type to token and we need id_token+token
the openidconnext config url does have the "id_token" has a supported type.

How can we chose which response_type we want ?

Thank you!

Start with the ui.initOAuth configuration and trace how Swagger UI generates the OpenID Connect implicit-flow URL and its response_type. Compare the current token-only behavior with the reported need for id_token+token; done means the requested response type can be selected without regressing the existing token flow.