I'm currently in the process of upgrading to .Net 10 from .Net 9 but unfortunately as usual the documentation of breaking changes seems to be lacking when it comes to certain functionality and features.

In my Program.cs I have the following defined where akspath is just a string variable that comes from config:

My transformer code is as follows (BearerSecuritySchemeTransformer):

public async Task TransformAsync(OpenApiDocument document, OpenApiDocumentTransformerContext context, CancellationToken cancellationToken)
{
    var authenticationSchemes = await _authenticationSchemeProvider.GetAllSchemesAsync();
    if (authenticationSchemes.Any(authScheme => authScheme.Name == "Bearer"))
    {
        var requirements = new Dictionary<string, OpenApiSecurityScheme>
        {
            ["Bearer"] = new OpenApiSecurityScheme
            {
                Type = SecuritySchemeType.Http,
                Scheme = "bearer",
                In = ParameterLocation.Header,
                BearerFormat = "JWT"
            }
        };

        document.Components ??= new OpenApiComponents();
        document.Components.SecuritySchemes = requirements;

        foreach (var operation in document.Paths.Values.SelectMany(path => path.Operations))
        {
            operation.Value.Security.Add(new OpenApiSecurityRequirement
            {
                [new OpenApiSecurityScheme { Reference = new OpenApiReference { Id = "Bearer", Type = ReferenceType.SecurityScheme } }] = Array.Empty<string>()
            });
        }
    }
}

And for (UrlPrefixTransformer):

public async Task TransformAsync(OpenApiDocument document, OpenApiDocumentTransformerContext context,
        CancellationToken cancellationToken)
    {
        var path = string.Empty;
        if (!string.IsNullOrWhiteSpace(_urlPrefix))
        {
            path = $"/{_urlPrefix}";
        }
        document.Servers = new List<OpenApiServer>
        {
            new() { Url = path }
        };
    }

If I update all of the Nuget packages in my solution to the .Net 10 versions and leave Microsoft.AspNetCore.OpenApi as version 9.0.11 then everything appears to work as expected and I can see my scalar API definition documents with no runtime errors. However, the moment I update to version 10.0.0 I am confronted with a host of errors with the OpenApiSecurity schemes completely changing in structure.

I found a reference here of how to amend my definitions to fit with .net 10 https://learn.microsoft.com/en-us/aspnet/core/fundamentals/openapi/customize-openapi?view=aspnetcore-10.0

Where they suggest doing the following:

If I use that recommendation, my solution compiles and runs however, if I hit my scalar docs I see a blank definition with Document 'my-api' could not be loaded and if I check the debug logs, the following issues are logged:

    System.NullReferenceException: Object reference not set to an instance of an object.
   at Microsoft.AspNetCore.OpenApi.Generated.<OpenApiXmlCommentSupport_generated>F821B935A564B6EA7D37ADF4B1A672CA2DD9CE6F88563F940522F766DFE640041__XmlCommentOperationTransformer.TransformAsync(OpenApiOperation operation, OpenApiOperationTransformerContext context, CancellationToken cancellationToken) in /Users/jason/Src/myAPI/myAPI/obj/Debug/net10.0/Microsoft.AspNetCore.OpenApi.SourceGenerators/Microsoft.AspNetCore.OpenApi.SourceGenerators.XmlCommentGenerator/OpenApiXmlCommentSupport.generated.cs:line 858

Given these errors are from internal source generation within .net which I'm not explicitly using myself, and the fact I am using the snippet they provided I feel like this is either a bug or I am missing something. Has anyone had similar issues and have been able to get around this?

I'm currently in the process of upgrading to .NET 10 from .NET 9, but unfortunately as usual the documentation of breaking changes seems to be lacking when it comes to certain functionality and features.

In my Program.cs, I have the following defined where akspath is just a string variable that comes from config:

My transformer code is as follows (BearerSecuritySchemeTransformer):

public async Task TransformAsync(OpenApiDocument document, OpenApiDocumentTransformerContext context, CancellationToken cancellationToken)
{
    var authenticationSchemes = await _authenticationSchemeProvider.GetAllSchemesAsync(); 

    if (authenticationSchemes.Any(authScheme => authScheme.Name == "Bearer"))
    {
        var requirements = new Dictionary<string, OpenApiSecurityScheme>
        {
            ["Bearer"] = new OpenApiSecurityScheme
            {
                Type = SecuritySchemeType.Http,
                Scheme = "bearer",
                In = ParameterLocation.Header,
                BearerFormat = "JWT"
            }
        };

        document.Components ??= new OpenApiComponents();
        document.Components.SecuritySchemes = requirements;

        foreach (var operation in document.Paths.Values.SelectMany(path => path.Operations))
        {
            operation.Value.Security.Add(new OpenApiSecurityRequirement
            {
                [new OpenApiSecurityScheme { Reference = new OpenApiReference { Id = "Bearer", Type = ReferenceType.SecurityScheme } }] = Array.Empty<string>()
            });
        }
    }
}

And UrlPrefixTransformer:

public async Task TransformAsync(OpenApiDocument document, OpenApiDocumentTransformerContext context,
        CancellationToken cancellationToken)
{
    var path = string.Empty;
 
    if (!string.IsNullOrWhiteSpace(_urlPrefix))
    {
        path = $"/{_urlPrefix}";
    }
 
    document.Servers = new List<OpenApiServer>
        {
            new() { Url = path }
        };
}

If I update all of the Nuget packages in my solution to the .NET 10 versions and leave Microsoft.AspNetCore.OpenApi at version 9.0.11, then everything appears to work as expected and I can see my scalar API definition documents with no runtime errors.

However, the moment I update to version 10.0.0, I am confronted with a host of errors with the OpenApiSecurity schemes completely changing in structure.

I found a reference here of how to amend my definitions to fit with .NET 10 https://learn.microsoft.com/en-us/aspnet/core/fundamentals/openapi/customize-openapi?view=aspnetcore-10.0

where they suggest doing the following:

If I use that recommendation, my solution compiles and runs however, if I hit my scalar docs I see a blank definition with document 'my-api' could not be loaded and if I check the debug logs, the following issues are logged:

System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.AspNetCore.OpenApi.Generated.<OpenApiXmlCommentSupport_generated>F821B935A564B6EA7D37ADF4B1A672CA2DD9CE6F88563F940522F766DFE640041__XmlCommentOperationTransformer.TransformAsync(OpenApiOperation operation, OpenApiOperationTransformerContext context, CancellationToken cancellationToken) in /Users/jason/Src/myAPI/myAPI/obj/Debug/net10.0/Microsoft.AspNetCore.OpenApi.SourceGenerators/Microsoft.AspNetCore.OpenApi.SourceGenerators.XmlCommentGenerator/OpenApiXmlCommentSupport.generated.cs:line 858

Given these errors are from internal source generation within .NET which I'm not explicitly using myself, and the fact I am using the snippet they provided I feel like this is either a bug or I am missing something. 

Has anyone had similar issues and have been able to get around this?