From 57af41460fda8a413b4ce3a43e8847dbe6b5ed50 Mon Sep 17 00:00:00 2001
From: ziad hany <ziadhany2016@gmail.com>
Date: Tue, 14 Jul 2026 13:54:23 +0300
Subject: [PATCH] Add support for userAgent in swagger Remove
 SessionAuthentication from AUTHENTICATION_WHITELIST for swagger

Signed-off-by: ziad hany <ziadhany2016@gmail.com>
---
 .../templates/drf_spectacular/swagger_ui.html  | 18 +++++++++++++++---
 vulnerablecode/settings.py                     |  4 ++++
 2 files changed, 19 insertions(+), 3 deletions(-)

diff --git a/vulnerabilities/templates/drf_spectacular/swagger_ui.html b/vulnerabilities/templates/drf_spectacular/swagger_ui.html
index 9f0837084..d90b38e35 100644
--- a/vulnerabilities/templates/drf_spectacular/swagger_ui.html
+++ b/vulnerabilities/templates/drf_spectacular/swagger_ui.html
@@ -22,12 +22,24 @@
     <div id="swagger-ui"></div>
     <script src="{{ dist }}/swagger-ui-bundle.js"></script>
     <script src="{{ dist }}/swagger-ui-standalone-preset.js"></script>
+    
     {% if script_url %}
     <script src="{{ script_url }}"></script>
     {% else %}
     <script>
-    {% include template_name_js %}
+        const swaggerSettings = {{ settings|safe }};
+        
+        swaggerSettings.url = "{{ schema_url }}";
+        swaggerSettings.dom_id = "#swagger-ui";
+
+        swaggerSettings.requestInterceptor = (request) => {
+            const userAgent = swaggerSettings.userAgent || "VCIO_API_AGENT";
+            request.headers['User-Agent'] = userAgent;
+            return request;
+        };
+        
+        const ui = SwaggerUIBundle(swaggerSettings);
+        window.ui = ui;
     </script>
     {% endif %}
-{% endblock %}
-
+{% endblock %}
\ No newline at end of file
diff --git a/vulnerablecode/settings.py b/vulnerablecode/settings.py
index 30aa0099b..edba092ab 100644
--- a/vulnerablecode/settings.py
+++ b/vulnerablecode/settings.py
@@ -319,7 +319,11 @@
         "defaultModelsExpandDepth": 1,
         "displayRequestDuration": True,
         "docExpansion": "list",
+        "userAgent": VCIO_USER_AGENT,
     },
+    "AUTHENTICATION_WHITELIST": [
+        "rest_framework.authentication.TokenAuthentication",
+    ],
     "SORT_OPERATIONS": False,
     "TAGS_SORTER": False,
 }