Support oneOf scope strategy

[sarbaoui]

Describe the feature

Hello
I'm looking for a way to manage my management, reading and writing scopes.
To illustrate my point we can take the example of github scopes : https://docs.github.com/en/developers/apps/building-oauth-apps/scopes-for-oauth-apps

Use cases

For PUT/GET APIs I'm looking to implement my scopes into the OpenApi spec this way :

Get profile/{profileId}
security

• OAuth2
  • user
  • read:user

PUT profile/{profileId}
security

• OAuth2
  • user

PUT profile/{profileId}/addresses
security

• OAuth2
  • user
  • user:address

I also tried to split each scope in différent security auth but it's not working.

Is there a way today to achieve the expected result?
Have you thought about implementing a oneOf scope strategy to handle this case?

Thanks