api-manager
api-manager copied to clipboard
Add support for `securitySchemes` object in API definition
Problem
The API definition can specify the securitySchemes object, which is an object to hold reusable Security Scheme Objects. This object defines the security scheme that can be used by the operations.
Even though this object is defined in the API definition, APIM does not take this object into account when enforcing security for the API. If one wishes to enforce the same, they have to use other available options (i.e. using policies, by configuring endpoint security, or by modifying resources to include headers, etc.)
Solution
We need to process the securitySchemes object defined in the API definition and apply those security schemes to the operations.
Affected Component
APIM
Version
5.0.0
Implementation
No response
Related Issues
No response
Suggested Labels
No response