redocly-cli
redocly-cli copied to clipboard
Digest Authorization header have bigger priority despite it described before another authorization
Describe the bug
Digest Authorization header has higher priority despite being described before another authorization type.
So if this type of Authorization is used, it always overrides the last Authorization header.
To Reproduce
Steps to reproduce the behavior:
- Given this
x-securitydescription:
x-security:
- scheme:
type: http
scheme: digest
values:
username: $inputs.name
password: secret
- scheme:
type: apiKey
name: Authorization
in: header
values:
value: $inputs.secret
- When
respectexecuted, digest auth header override API-Key header, although it should have bigger priority
Expected behavior
x-security header resolution should follow top-to-bottom order, with the bottom entry having higher priority.