fix(docs,security): Swagger UI — staging для exploration, prod env-flagged

2026-05-12 17:43:12 +00:00
parent ba7b36326d
commit e2080d8991
3 changed files with 26 additions and 5 deletions
@@ -77,10 +77,18 @@ ordinis:
    attempt-max: ${ORDINIS_OUTBOX_ATTEMPT_MAX:1000}

 springdoc:
+  # Per env policy:
+  #   prod  → swagger UI disabled (real-user environment, не для exploration);
+  #           api-docs JSON остаётся для SDK generation / machine consumers
+  #   staging/dev → оба enabled (interactive playground для интеграторов)
+  # Controlled via ORDINIS_SWAGGER_UI_ENABLED env var (helm values-prod.yaml:
+  # springdoc.swaggerUi=false). Default true для backward compat.
  api-docs:
    path: /v3/api-docs
+    enabled: ${ORDINIS_SWAGGER_API_DOCS_ENABLED:true}
  swagger-ui:
    path: /swagger-ui.html
+    enabled: ${ORDINIS_SWAGGER_UI_ENABLED:true}
    operations-sorter: method
    tags-sorter: alpha
    display-request-duration: true