From f00417efda9327a7e5c11729e58e133c587d32ae Mon Sep 17 00:00:00 2001
From: David Pine <david.pine@microsoft.com>
Date: Mon, 29 Apr 2024 09:35:20 -0500
Subject: [PATCH] Protect swagger behind dev env. (#6823)

---
 .../BlazorWasm/BlazorWasm.Server/Program.cs   | 20 +++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

diff --git a/orleans/Blazor/BlazorWasm/BlazorWasm.Server/Program.cs b/orleans/Blazor/BlazorWasm/BlazorWasm.Server/Program.cs
index 5d2be8546d6..70e75cf6fb8 100644
--- a/orleans/Blazor/BlazorWasm/BlazorWasm.Server/Program.cs
+++ b/orleans/Blazor/BlazorWasm/BlazorWasm.Server/Program.cs
@@ -1,10 +1,14 @@
-using Microsoft.OpenApi.Models;
+using Microsoft.OpenApi.Models;
 using Sample.Silo.Api;
 using Orleans.Providers;
 
+bool isDevelopment = false;
+
 await Host.CreateDefaultBuilder(args)
     .UseOrleans((ctx, builder) =>
     {
+        isDevelopment = ctx.HostingEnvironment.IsDevelopment();
+
         builder.UseLocalhostClustering();
         builder.AddMemoryGrainStorageAsDefault();
         builder.AddMemoryStreams<DefaultMemoryMessageBodySerializer>("MemoryStreams");
@@ -40,11 +44,15 @@ await Host.CreateDefaultBuilder(args)
             .Configure(app =>
             {
                 app.UseCors("ApiService");
-                app.UseSwagger();
-                app.UseSwaggerUI(options =>
+
+                if (isDevelopment)
                 {
-                    options.SwaggerEndpoint("/swagger/v1/swagger.json", nameof(Sample));
-                });
+                    app.UseSwagger();
+                    app.UseSwaggerUI(options =>
+                    {
+                        options.SwaggerEndpoint("/swagger/v1/swagger.json", nameof(Sample));
+                    });
+                }
 
                 app.UseRouting();
                 app.UseEndpoints(endpoints =>
@@ -61,4 +69,4 @@ await Host.CreateDefaultBuilder(args)
             options.SuppressStatusMessages = true;
         });
     })
-    .RunConsoleAsync();
\ No newline at end of file
+    .RunConsoleAsync();