Restrict access to certain API controllers in Swagger using Swashbuckle and ASP.NET Identity

Question

So, I started using Swagger. I\'m absolutely in love with it\'s features, but I have some doubts on availability of all methods to public.

As far as I understood -

Answer 1

Created new folder called "swagger" in the project root. The folder name should match the url to the swagger documentation.

Added new Web.config file in the newly created folder.

answer found here.

Another option will be:

"Off the top of my head I would say a DelegatingHandler is what you need here."

answer found here.