Add bearer access token in docs via decorator, disable webby

config/pimcore/config.yaml

@@ -11,4 +11,10 @@ api_platform:
     enable_docs: true
     enable_entrypoint: false
     enable_swagger_ui: false
-    enable_re_doc: false
+    enable_re_doc: false
+    show_webby: false
+    swagger:
+        api_keys:
+            access_token:
+                name: 'Authorization'
+                type: 'header'

config/services.yaml

@@ -96,4 +96,8 @@ services:
     Pimcore\Bundle\StudioApiBundle\Security\Voter\TokenVoter:
         arguments: ['@request_stack']
         tags:
-            - { name: security.voter }
+            - { name: security.voter }
+
+    #Decorators
+    Pimcore\Bundle\StudioApiBundle\ApiPlatform\OpenApiFactoryDecorator:
+        decorates: 'api_platform.openapi.factory'

src/ApiPlatform/OpenApiFactoryDecorator.php

@@ -0,0 +1,42 @@
+<?php
+declare(strict_types=1);
+
+/**
+ * Pimcore
+ *
+ * This source file is available under two different licenses:
+ * - GNU General Public License version 3 (GPLv3)
+ * - Pimcore Commercial License (PCL)
+ * Full copyright and license information is available in
+ * LICENSE.md which is distributed with this source code.
+ *
+ *  @copyright  Copyright (c) Pimcore GmbH (http://www.pimcore.org)
+ *  @license    http://www.pimcore.org/license     GPLv3 and PCL
+ */
+
+namespace Pimcore\Bundle\StudioApiBundle\ApiPlatform;
+
+use ApiPlatform\OpenApi\Factory\OpenApiFactoryInterface;
+use ApiPlatform\OpenApi\Model\SecurityScheme;
+use ApiPlatform\OpenApi\OpenApi;
+
+
+final readonly class OpenApiFactoryDecorator implements OpenApiFactoryInterface
+{
+    public function __construct(private OpenApiFactoryInterface $decorated)
+    {
+    }
+
+    public function __invoke(array $context = []): OpenApi
+    {
+        $openApi = $this->decorated->__invoke($context);
+
+        $securitySchemes = $openApi->getComponents()->getSecuritySchemes() ?: new \ArrayObject();
+        $securitySchemes['access_token'] = new SecurityScheme(
+            type: 'http',
+            scheme: 'bearer',
+        );
+
+        return $openApi;
+    }
+}