There are two problems here:

flasgger extracts the OpenAPI specs from the doc strings but since the /auth resource is created automatically by the flask-jwt package there's no place to add the doc strings.

We could append that later in the OpenAPI spec generated by flasgger but Bearer Authentication is introduced only in OpenAPI 3.0 which is not supported by flasgger yet.

https://swagger.io/docs/specification/authentication/bearer-authentication/

This suggests we should perhaps write the OpenAPI 3.0 specification for the SQuaSH RESTful API and try the Swagger UI v3 in order to add the JWT token in the authorization headers.