chore: move open api spec modification to post app.boot()

The servers open api spec info is preserved when api spec is modified post app.boot()

Signed-off-by: Dominique Emond <dremond@ca.ibm.com>

packages/shopping/src/application.ts

@@ -29,7 +29,8 @@ import {
 import {PasswordHasherBindings} from './keys';
 import {BcryptHasher} from './services/hash.password.bcryptjs';
 import {JWTAuthenticationStrategy} from './authentication-strategies/jwt-strategy';
-import {SECURITY_SCHEME_SPEC} from './utils/security-spec';
+import {RestBindings} from '@loopback/rest';
+import {addSecuritySchemesToOpenApiSpec} from './utils/security-spec';
 
 /**
  * Information from package.json
@@ -49,18 +50,6 @@ export class ShoppingApplication extends BootMixin(
   constructor(options?: ApplicationConfig) {
     super(options);
 
-    //
-    // Defines security scheme in OpenAPI spec.
-    // Controller method must enforce security scheme.
-    // See '/users/me' endpoint in user.controller.ts
-    //
-    this.api({
-      openapi: '3.0.0',
-      info: {title: pkg.name, version: pkg.version},
-      paths: {},
-      components: {securitySchemes: SECURITY_SCHEME_SPEC},
-    });
-
     this.setUpBindings();
 
     // Bind authentication component related elements
@@ -113,7 +102,14 @@ export class ShoppingApplication extends BootMixin(
     this.bind(UserServiceBindings.USER_SERVICE).toClass(MyUserService);
   }
 
+  modifyApiSpecAndRebind() {
+    let openAPISchema = this.getSync(RestBindings.API_SPEC);
+    addSecuritySchemesToOpenApiSpec(openAPISchema);
+    this.bind(RestBindings.API_SPEC).to(openAPISchema);
+  }
+
   async start(): Promise<void> {
+    this.modifyApiSpecAndRebind();
     await super.start();
   }
 }

packages/shopping/src/utils/security-spec.ts

@@ -4,6 +4,7 @@
 // License text available at https://opensource.org/licenses/MIT
 
 import {SecuritySchemeObject, ReferenceObject} from '@loopback/openapi-v3';
+import {OpenApiSpec} from '@loopback/rest';
 
 export const SECURITY_SPEC_OPERATION = [{bearerAuth: []}];
 export type SecuritySchemeObjects = {
@@ -16,3 +17,10 @@ export const SECURITY_SCHEME_SPEC: SecuritySchemeObjects = {
     bearerFormat: 'JWT',
   },
 };
+
+
+export function addSecuritySchemesToOpenApiSpec(schema: OpenApiSpec) {
+  schema.components = schema.components || {};
+  schema.components.securitySchemes = schema.components.securitySchemes || {};
+  Object.assign(schema.components.securitySchemes, SECURITY_SCHEME_SPEC);
+}