Skip to content

Commit 4436e3a

Browse files
baywetralfhandlkevinswiber
authored
Apply suggestions from code review
Co-authored-by: Ralf Handl <[email protected]> Co-authored-by: Kevin Swiber <[email protected]>
1 parent b50dd1a commit 4436e3a

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

versions/3.1.1.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3989,8 +3989,10 @@ The name used for each property MUST correspond to a security scheme declared in
39893989
A Security Requirement Object MAY refer to multiple security schemes in which case all schemes MUST be satisfied for a request to be authorized.
39903990
This enables support for scenarios where multiple query parameters or HTTP headers are required to convey security information.
39913991

3992-
When the security field is defined on the [OpenAPI Object](#openapi-object) or [Operation Object](#operation-object) and contains multiple Security Requirement Objects, only one of the entries in the list needs to be satisfied to authorize the request.
3993-
This enables support for scenarios where the API supports alternative security schemes, or when they are optional.
3992+
When the `security` field is defined on the [OpenAPI Object](#openapi-object) or [Operation Object](#operation-object) and contains multiple Security Requirement Objects, only one of the entries in the list needs to be satisfied to authorize the request.
3993+
This enables support for scenarios where the API allows multiple, independent security schemes.
3994+
3995+
An empty Security Requirement Object (`{}`) indicates anonymous access is supported.
39943996

39953997
##### Patterned Fields
39963998

0 commit comments

Comments
 (0)