apiaddicts / sonar-openapi

Evaluation engine for OpenAPI/Swagger API definitions in SonarQube
GNU Lesser General Public License v3.0
5 stars 1 forks source link

Set scopes as nonMandatory property of a security definition #1

Closed tgrzywacz closed 3 months ago

tgrzywacz commented 1 year ago

Hi it seems that scanner requires scopes for each and single element of securityDefinitions. This is a bit problematic for us, as some of our internal definitions may not necessarily contain any scopes. Also I believe it is not invalid from openAPI specification point of view. Do you think it would be possible to make a change and set it from: b.mandatoryProperty("scopes", b.object( into: b.property("scopes", b.object(

inside OpenApi2/3Grammar

EnriqueGomez12 commented 3 months ago

Hi!

Thank you for bringing this to our attention. We have reviewed the issue and you are correct.

We have already made the necessary change.