How to fully disable swagger-ui in spring-boot?(/swagger-ui.html should return 404)

Question

I have read following topic: Disabling Swagger with Spring MVC

and I wrote:

@Bean
public Docket api() {
    return new Docket(DocumentationType.SWAGGER_2)
            .select()
            .apis(RequestHandlerSelectors.basePackage("com.project.name.controller"))
            .paths(PathSelectors.ant("/api/**"))
            .build()
            .apiInfo(apiInfo())
            .enable(false);
}

But in case if I try to access swagger ui: localhost:8080/swagger-ui.html
I see

It looks not accurate. Can I fully disabled this URL ? 404 for example or something like this.

Indra Basak · Accepted Answer · 2017-09-28T17:33:49.060

47

My answer is similar to the answer provided earlier with a slight difference. I usually create a separate spring profile named swagger. When I want to enable Swagger, l pass the following VM flag while starting my application, -Dspring.profiles.active=swagger. Here is an example of my Swagger configuration,

@Profile(value = {"swagger"})
@Configuration
@EnableSwagger2
public class SwaggerConfiguration {
    ...
}

Next time when you try to access swagger-ui.html without swagger profile, you will get an empty Swagger screen but not 404.

If you don't want to load the static Swagger UI page at all, you can write a simple controller as shown below,

@Profile("!swagger")
@RestController
@Slf4j
public class DisableSwaggerUiController {

    @RequestMapping(value = "swagger-ui.html", method = RequestMethod.GET)
    public void getSwagger(HttpServletResponse httpResponse) throws IOException {
        httpResponse.setStatus(HttpStatus.NOT_FOUND.value());
    }
}

Now if you try to access swagger-ui.html without swagger profile, you will get a 404.

edited Sep 28 '17 at 17:33

answered Sep 27 '17 at 22:23

Indra Basak

7,124
1
26
45

Did you try to access swagger-ui? What did you see? – gstackoverflow Sep 28 '17 at 08:06
I get an empty swagger screen but not 404. Updated my posting. – Indra Basak Sep 28 '17 at 17:02
1

Yes, I got approximately the same. Actually browser asks me to type base url. But I want to get 404 – gstackoverflow Sep 28 '17 at 17:30
Updated my posting. I got a 404 when I tried with the new controller. – Indra Basak Sep 28 '17 at 17:34
How are you starting your service? – Indra Basak May 10 '18 at 03:58

score 19 · Answer 2 · edited Feb 24 '21 at 09:27

19

with swagger 3.0.0 version you can add springfox.documentation.enabled=false in corresponding environment profile application.properties file. For example, I have added this to application-prod.properties to disable in production (while running the app you must specify the profile using VM args like -Dspring.profiles.active=prod)

edited Feb 24 '21 at 09:27

asherbret

5,439
4
38
58

answered Feb 18 '21 at 17:40

Vamsi Krishna DS

615
6
17

2

This is the best answer anywhere for Swagger UI 3.0.0 and it was not easy to find (See my question here: https://stackoverflow.com/questions/67439123/swagger-3-0-0-cant-disable-in-production-without-swaggerconfig-and-profile). It is not even included in SpringFox's migration guide or current documentation. A very simple answer that should be added to SpringFox's documentation and migration guide post-haste. I would like to see a complete list of Spring Boot application properties in SpringFox's documentation also. – Geyser14 May 07 '21 at 17:57
1

This is the best one ! – Hikaru Shindo Jul 05 '21 at 16:09
When I try this, I get an infinite loop of `Unable to infer base url.` popup errors as the springfox.js script tries to execute the ui, security, & swagger-resources scripts, but can't handle the 404. – ScrappyDev Oct 26 '21 at 18:34

Henrik Solum · Answer 3 · 2022-12-08T13:32:20.267

10

Adding onto @Hayden's answer (I don't have enough points to comment..)

According to the springdoc documentation, you can disable both the springdoc api endpoints and swagger-ui using the following properties:

https://springdoc.org/#disabling-the-springdoc-openapi-endpoints

# Disabling the /v3/api-docs endpoint
springdoc.api-docs.enabled=false

https://springdoc.org/#disabling-the-swagger-ui

# Disabling the swagger-ui
springdoc.swagger-ui.enabled=false

edited Dec 08 '22 at 13:32

answered Sep 07 '21 at 07:35

Henrik Solum

101
1
5

this is the most up-to-date answer! – omerhakanbilici Apr 08 '22 at 13:30

score 8 · Answer 4 · answered Sep 27 '17 at 18:56

You can externalize the @EnableSwagger2 to its own @Configruation and load it conditionally via a property or profile. e.g.

@Profile("!production")
@Configuration
@EnableSwagger2
public class SwaggerConfiguration{
    //Additional Swagger Beans

}

this would activate swagger for any profile that isn't production.

score 4 · Answer 5 · answered Nov 20 '18 at 12:45

If you dont have Swagger annotations inside controllers... just exclude SwaggerConfig.class and swagger dependencies on build

<build>
    <plugins>
        <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-compiler-plugin</artifactId>
            <configuration>
                <excludes>
                    <exclude>com/company/app/SwaggerConfig.java</exclude>
                </excludes>
            </configuration>
        </plugin>
        <plugin>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-maven-plugin</artifactId>
            <configuration>
                <excludes>
                    <exclude>
                        <groupId>io.springfox</groupId>
                        <artifactId>springfox-swagger-ui</artifactId>
                    </exclude>
                    <exclude>
                        <groupId>io.springfox</groupId>
                        <artifactId>springfox-swagger2</artifactId>
                    </exclude>
                </excludes>
            </configuration>
            <executions>
                <execution>
                    <goals>
                        <goal>repackage</goal>
                    </goals>
                </execution>
            </executions>
        </plugin>
    </plugins>
</build>

score 2 · Answer 6 · answered Aug 05 '21 at 02:09

2

For SpringDoc users, add this to your application.properties

springdoc.api-docs.enabled=false

To disable Swagger only when the prod profile is active, add it to your application-prod.properties instead

answered Aug 05 '21 at 02:09

Hayden

61
1
3

score 1 · Answer 7 · answered Oct 20 '22 at 14:19

In latest version of spring boot you can add this in yout application.yml :

springdoc:
  swagger-ui:
    enabled: false
  api-docs:
    enabled: false

So that swagger-ui key is used to disable the swagger interface and api-docs one is used to disable the route on which the JSON describing your API is served.

In my config I have a prod profile wich reads an application-prod.yml containing those lines.

score 0 · Answer 8 · edited Aug 11 '20 at 11:52

0

For those that use the code gen:

@Controller
@Profile({"dev", "staging"})
public class HomeController {
    @RequestMapping(value = "/")
    public String index() {
        System.out.println("swagger-ui.html");
        return "redirect:swagger-ui.html";
    }
}

And add the file to you .swagger-codegen-ignore else your changes are overwritten on the next maven build

edited Aug 11 '20 at 11:52

Vorashil Farzaliyev

425
3
13

answered Jun 14 '19 at 13:38

Jacques Koorts

1,819
1
17
10

hugoalexandremf · Answer 9 · 2022-02-15T17:15:56.957

0

When using springdoc-openapi-ui dependency one can disable swagger-ui through the property:

springdoc.swagger-ui.enabled=false

as stated in Spring Doc FAQ.

edited Feb 15 '22 at 17:15

answered Feb 15 '22 at 17:08

hugoalexandremf

166
1
1
9

score -1 · Answer 10 · answered Apr 23 '21 at 10:47

-1

Just remove dependency.

<!--<dependency>
            <groupId>io.springfox</groupId>
            <artifactId>springfox-swagger-ui</artifactId>
            <version>2.9.2</version>
</dependency>-->

It does not affect compiling.

answered Apr 23 '21 at 10:47

Kymo Wang

1,413
2
10
9

How to fully disable swagger-ui in spring-boot?(/swagger-ui.html should return 404)

10 Answers10

Linked