[BUG][Java][Client][Native] Java 11 native client generator doesn't support security and securitySchemes

[joschi]

Bug Report Checklist

• [x] Have you provided a full/minimal spec to reproduce the issue?
• [x] Have you validated the input using an OpenAPI validator (example)?
• [x] What's the version of OpenAPI Generator used?
• [x] Have you search for related issues/PRs?
• [x] What's the actual output vs expected output?

Description

The Java 11 Native HTTP client generator (native) doesn't support security and securitySchemes as described in https://swagger.io/docs/specification/authentication/ and https://swagger.io/specification/#security-scheme-object.

openapi-generator version

openapi-generator-cli 4.3.1

OpenAPI declaration file content or url

openapi: 3.0.1
info:
  title: Title
  version: 1.0.0
  description: Description
paths:
  /something:
    get:
      # Operation-specific security:
      security:
        - ApiKeyAuth: []
      responses:
        '200':
          description: OK (successfully authenticated)
# https://swagger.io/docs/specification/authentication/api-keys/
components:
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-API-KEY
security:
  - ApiKeyAuth: []

Command line used for generation

# wget https://repo1.maven.org/maven2/org/openapitools/openapi-generator-cli/4.3.1/openapi-generator-cli-4.3.1.jar -O openapi-generator-cli.jar
# java -jar openapi-generator-cli.jar generate -i openapi.yaml -g java -o pkg/instana/openapi --skip-validate-spec -p dateLibrary=java8 --library native

Steps to reproduce

Use the OpenAPI spec from above and the command line mentioned above to generate the client.

No ApiKeyAuth class or any class related to authentication at all is being generated.

[joschi]

Users could create a custom request interceptor right now to emulate the functionality:

String myToken = "...";
ApiClient apiClient = new ApiClient();
apiClient.setRequestInterceptor(builder -> builder.header("Authorization", "apiToken " + myToken));

In my opinion this doesn't fulfill the expectation of the clients "just working", though.