Add support for userAgent in swagger (#2377)

Remove SessionAuthentication from AUTHENTICATION_WHITELIST for swagger

Signed-off-by: ziad hany <ziadhany2016@gmail.com>

Author: ziadhany

vulnerabilities/templates/drf_spectacular/swagger_ui.html

@@ -22,12 +22,24 @@
     <div id="swagger-ui"></div>
     <script src="{{ dist }}/swagger-ui-bundle.js"></script>
     <script src="{{ dist }}/swagger-ui-standalone-preset.js"></script>
+    
     {% if script_url %}
     <script src="{{ script_url }}"></script>
     {% else %}
     <script>
-    {% include template_name_js %}
+        const swaggerSettings = {{ settings|safe }};
+        
+        swaggerSettings.url = "{{ schema_url }}";
+        swaggerSettings.dom_id = "#swagger-ui";
+
+        swaggerSettings.requestInterceptor = (request) => {
+            const userAgent = swaggerSettings.userAgent || "VCIO_API_AGENT";
+            request.headers['User-Agent'] = userAgent;
+            return request;
+        };
+        
+        const ui = SwaggerUIBundle(swaggerSettings);
+        window.ui = ui;
     </script>
     {% endif %}
-{% endblock %}
-
+{% endblock %}

vulnerablecode/settings.py

@@ -329,7 +329,11 @@
         "defaultModelsExpandDepth": 1,
         "displayRequestDuration": True,
         "docExpansion": "list",
+        "userAgent": VCIO_USER_AGENT,
     },
+    "AUTHENTICATION_WHITELIST": [
+        "rest_framework.authentication.TokenAuthentication",
+    ],
     "SORT_OPERATIONS": False,
     "TAGS_SORTER": False,
 }