What is the breakdown of different component security definitions? (ie. keys, oauth, jwt)

[kinlane]

Dive deeper into the security object and understand how it is used.

[kinlane]

Notes pulled from Wiki:

type: 39% apiKey, 30% oauth2, 28% http, 2.2% null, 1% openIdConnect

PH→ type is required so null should throw an error

for openApi, 76% in header, query 21%, cookie 3%

For http scheme, ‘Bearer’ is often misspelled ‘bearer’, ‘Basic’, is ‘basic',

PH→ For http, ‘scheme’ some of the values found are not registered with IANA, which is fine (specs says “should”), but → this should show a warning in postman

[kinlane]

This has been answered, but some open questions. https://github.com/postman-open-technologies/knowledge-base/blob/main/R/oas_summary.md#how-are-the-security-related-properties-used-in-apis