This article introduces a Swagger UI plugin designed specifically for Backend-for-Frontend (BFF) architectures, along with working demos (with and without OIDC) that validate the approach end to end.
The Rise (and Return) of the BFF
Modern web security has shifted away from storing “tokens in the browser.” XSS attacks, stricter browser privacy policies, and evolving OAuth recommendations have made Backend-for-Frontend (BFF) architectures the gold standard for secure web apps.