Closed jabielecki closed 1 year ago
Hi @jabielecki,
Thanks for raising your concerns.
We already have a fix for this visual issue to avoid highlighting the whole definition.
It will be reporting only on the specific operations that lack security or the openapi
field itself.
The fix will be added to the next release.
As for the warning, we will consider your suggestion but our team has a strong opinion that every API should have security defined.
Even if the API is truly public without any credentials required, define the empty security section to let people know you didn't forget.
Hope this makes sense.
Thank you very much for working on it!
For the error level, if it's a well-informed and well-intended departure from OAS3, well, you are the experts here :smile: :+1:
What happened?
I've got a problem "Every API should have security defined on the root level or for each operation" after loading a typical example found on the web (e.g. petstore.yaml). So far so good, because the yaml in fact does have this exact characteristic.
But the attributes of such finding are broken:
security
field to every single operation.What should have happened instead?
security
field) unerlined in yellowsecurity
field should not be underlined.Minimal reproducible OpenAPI snippet
Screenshots
Additional context
Happens on "3.0.0" and "3.1.0". Today's version of the plugin from VS Code Marketplace: 2022-10-25.