Skip to content

Commit 33aef07

Browse files
committed
Review feedback
1 parent 50f65f5 commit 33aef07

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Diff for: src/oas.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -4071,7 +4071,7 @@ flows:
40714071
Lists the required security schemes to execute this operation.
40724072

40734073
The name used for each property MUST either correspond to a security scheme declared in the [Security Schemes](#security-scheme-object) under the [Components Object](#components-object), or be the URI of a Security Scheme Object.
4074-
Property names that match the syntax of a component name under the Components Object MUST be treated as a component name.
4074+
Property names that are identical to a component name under the Components Object MUST be treated as a component name.
40754075
To reference a Security Scheme with a single-segment relative URI reference (e.g. `foo`) that collides with a component name (e.g. `#/components/securitySchemes/foo`), use the `.` path segment (e.g. `./foo`).
40764076

40774077
Using a Security Scheme component name that appears to be a URI is NOT RECOMMENDED, as the precedence of component-name-matching over URI resolution, which is necessary to maintain compatibility with prior OAS versions, is counter-intuitive. See also [Security Considerations](#security-considerations).
@@ -4088,7 +4088,7 @@ An empty Security Requirement Object (`{}`) indicates anonymous access is suppor
40884088

40894089
| Field Pattern | Type | Description |
40904090
| --- | :---: | --- |
4091-
| <a name="securityRequirementsName"></a>{name} | [`string`] | Each name or URI MUST correspond to a security scheme as described above. If the security scheme is of type `"oauth2"` or `"openIdConnect"`, then the value is a list of scope names required for the execution, and the list MAY be empty if authorization does not require a specified scope. For other security scheme types, the array MAY contain a list of role names which are required for the execution, but are not otherwise defined or exchanged in-band. |
4091+
| <a name="security-requirements-name"></a>{name} | [`string`] | Each name or URI MUST correspond to a security scheme as described above. If the security scheme is of type `"oauth2"` or `"openIdConnect"`, then the value is a list of scope names required for the execution, and the list MAY be empty if authorization does not require a specified scope. For other security scheme types, the array MAY contain a list of role names which are required for the execution, but are not otherwise defined or exchanged in-band. |
40924092

40934093
##### Security Requirement Object Examples
40944094

0 commit comments

Comments
 (0)