You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When an API has security schemes with scopes which don't fit the naming schema defined in rule 225, Zally reports an unspecific violation for rule 105.
...
paths:
'/example':
get:
security:
foo:
- example/read...components:
securitySchemes:
foo:
type: oauth2description: Example OAuth schemeflows:
clientCredentials:
tokenUrl: https://api.example.com/oauth/tokenscopes:
example/read: Read access to this APIexample/write: Write access to this API
(The correct scope names would be example.read and example.write.)
Expected behavior
Instead, there should be a violation for rule 225, telling that the rule name is not fitting naming convention.
A violation for rule 105 is still applicable if there is an endpoint without any scope assigned.
The text was updated successfully, but these errors were encountered:
Current behavior
When an API has security schemes with scopes which don't fit the naming schema defined in rule 225, Zally reports an unspecific violation for rule 105.
(The correct scope names would be
example.read
andexample.write
.)Expected behavior
Instead, there should be a violation for rule 225, telling that the rule name is not fitting naming convention.
A violation for rule 105 is still applicable if there is an endpoint without any scope assigned.
The text was updated successfully, but these errors were encountered: