Thank you this will help a ton, this is exactly what I was looking for. I'll look into implementing your suggestion instead as yes you're right, our REST codebase does manage security for UnknwonUser - looks like Delegated Authentication is what I am after.

I'll need to read into column-privileges as I had no clue this was a thing, thank you

Hi @Ashok Kumar T 
perhaps I didn't make myself clear with my intention;

I want to be able to directly set metadata such as summary, responses, request parameters, etc. directly in the comment above each endpoint method (where I said "can I add metadata here?")

I don't mind if I have to make my own custom implementation to read these values, but I have no idea where to start right now, or whether I even should, perhaps there are already a solution available somewhere?

reason: The swagger spec generated is almost useless, because it does not specify the required parameters / payload for each respective endpoint, it only captures what is inside the UrlMap it seems.

Ideally I'd want to have my implementation of swagger to read the required request parameters / payload, but manually keeping docs updated through comments is a fine starter for my project, is any of this possible already or would I need to create a custom solution using %REST.API ?

EDIT: I just realized you're talking about using specification-first approach, I am talking about the opposite, implementation first, I'll look into going about the specification-first approach.

Thank you again for your help.