From f8e9fd6327a5767d4223ce76511eb1101e6ed5ed Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cristi=20V=C3=AEjdea?= <cristi@cvjd.me>
Date: Wed, 19 Dec 2018 19:12:22 +0200
Subject: [PATCH] Prefix localStorage keys with current pathname

This avoids collisions between multiple instance of drf-yasg on the same domain.

Fixes #269.
---
 .../static/drf-yasg/swagger-ui-init.js        | 25 +++++++++++++------
 1 file changed, 17 insertions(+), 8 deletions(-)

diff --git a/src/drf_yasg/static/drf-yasg/swagger-ui-init.js b/src/drf_yasg/static/drf-yasg/swagger-ui-init.js
index 18eb7b9..cb8e67b 100644
--- a/src/drf_yasg/static/drf-yasg/swagger-ui-init.js
+++ b/src/drf_yasg/static/drf-yasg/swagger-ui-init.js
@@ -2,6 +2,17 @@
 var currentPath = window.location.protocol + "//" + window.location.host + window.location.pathname;
 var defaultSpecUrl = currentPath + '?format=openapi';
 
+function slugify(text) {
+    return text.toString().toLowerCase()
+        .replace(/\s+/g, '-')           // Replace spaces with -
+        .replace(/[^\w\-]+/g, '')       // Remove all non-word chars
+        .replace(/--+/g, '-')           // Replace multiple - with single -
+        .replace(/^-+/, '')             // Trim - from start of text
+        .replace(/-+$/, '');            // Trim - from end of text
+}
+
+var KEY_AUTH = slugify(window.location.pathname) + "-drf-yasg-auth";
+
 // load the saved authorization state from localStorage; ImmutableJS is used for consistency with swagger-ui state
 var savedAuth = Immutable.fromJS({});
 
@@ -56,8 +67,7 @@ function initSwaggerUi() {
     }
     if (document.querySelector('.auth-wrapper .authorize')) {
         patchSwaggerUi();
-    }
-    else {
+    } else {
         insertionQ('.auth-wrapper .authorize').every(patchSwaggerUi);
     }
 
@@ -114,9 +124,9 @@ function initSwaggerUiConfig(swaggerSettings, oauth2Settings) {
     }
     if (persistAuth) {
         try {
-            savedAuth = Immutable.fromJS(JSON.parse(localStorage.getItem("drf-yasg-auth")) || {});
+            savedAuth = Immutable.fromJS(JSON.parse(localStorage.getItem(KEY_AUTH)) || {});
         } catch (e) {
-            localStorage.removeItem("drf-yasg-auth");
+            localStorage.removeItem(KEY_AUTH);
         }
     }
     if (refetchWithAuth) {
@@ -278,8 +288,7 @@ function applyAuth(authorization, requestUrl, requestHeaders) {
                 if (_in === "query") {
                     if (requestUrl) {
                         requestUrl = setQueryParam(requestUrl, paramName, key);
-                    }
-                    else {
+                    } else {
                         console.warn("WARNING: cannot apply apiKey query parameter via interceptor");
                     }
                 }
@@ -343,7 +352,7 @@ function hookAuthActions(sui, persistAuth, refetchWithAuth, refetchOnLogout) {
             sui.authActions.showDefinitions(); // hide authorize dialog
         }
         if (persistAuth) {
-            localStorage.setItem("drf-yasg-auth", JSON.stringify(savedAuth.toJSON()));
+            localStorage.setItem(KEY_AUTH, JSON.stringify(savedAuth.toJSON()));
         }
     };
 
@@ -368,7 +377,7 @@ function hookAuthActions(sui, persistAuth, refetchWithAuth, refetchOnLogout) {
             sui.authActions.showDefinitions(); // hide authorize dialog
         }
         if (persistAuth) {
-            localStorage.setItem("drf-yasg-auth", JSON.stringify(savedAuth.toJSON()));
+            localStorage.setItem(KEY_AUTH, JSON.stringify(savedAuth.toJSON()));
         }
         originalLogout(authorization);
     };