SwaggerUI rasing Conent-Security-Policy error when using AuthenticationCode flow - azure

Question

I am trying to implement AuthorizationCode grant type for SwaggerUI that will work with Azure AD.
The error that I am getting is:
Content Security Policy: The page’s settings blocked the loading of a
resource at
https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token
(“connect-src”)
I used web debugging proxy tool to check all network requests and I see there is a request to my redirect uri with state and authorization code that should be used for token exchange, but that doesn't happen.
My SwaggerUI setup:
// Enable middleware to serve generated Swagger as a JSON endpoint.
app.UseSwagger();
// Enable middleware to serve swagger-ui (HTML, JS, CSS etc.), specifying the Swagger JSON endpoint.
app.UseSwaggerUI(c =>
{
c.OAuthClientId(Configuration["Swagger:ClientId"]);
c.OAuthAppName("My API");
c.OAuthUsePkce();
c.OAuthScopeSeparator(" ");
c.InjectStylesheet("/swagger-ui/dark.css");
c.DisplayRequestDuration();
});
...
string authUrl = $"https://login.microsoftonline.com/{Configuration["AzureAD:TenantId"]}/oauth2/v2.0/authorize";
c.AddSecurityDefinition("oauth2", new OpenApiSecurityScheme
{
Description = "OAuth2.0 Auth Code with PKCE",
Name = "oauth2",
Type = SecuritySchemeType.OAuth2,
In = ParameterLocation.Header,
Flows = new OpenApiOAuthFlows
{
AuthorizationCode = new OpenApiOAuthFlow
{
AuthorizationUrl = new Uri(authUrl, UriKind.Absolute),
TokenUrl = new Uri(authUrl.Replace("authorize", "token"), UriKind.Absolute),
Scopes = new Dictionary<string, string>
{
{ $"api://{Configuration["AzureAD:ResourceId"]}/user_impersonation", "user impersonation" }
}
}
}
});
c.AddSecurityRequirement(new OpenApiSecurityRequirement
{
{
new OpenApiSecurityScheme
{
Reference = new OpenApiReference { Type = ReferenceType.SecurityScheme, Id = "oauth2" }
},
Array.Empty<string>()
}
});