diff --git a/versions/3.1.0.md b/versions/3.1.0.md index 1f0830643f..264ab454f1 100644 --- a/versions/3.1.0.md +++ b/versions/3.1.0.md @@ -3200,8 +3200,9 @@ Field Name | Type | Applies To | Description in | `string` | `apiKey` | **REQUIRED**. The location of the API key. Valid values are `"query"`, `"header"` or `"cookie"`. scheme | `string` | `http` | **REQUIRED**. The name of the HTTP Authorization scheme to be used in the [Authorization header as defined in RFC7235](https://tools.ietf.org/html/rfc7235#section-5.1). The values used SHOULD be registered in the [IANA Authentication Scheme registry](https://www.iana.org/assignments/http-authschemes/http-authschemes.xhtml). bearerFormat | `string` | `http` (`"bearer"`) | A hint to the client to identify how the bearer token is formatted. Bearer tokens are usually generated by an authorization server, so this information is primarily for documentation purposes. -flows | [OAuth Flows Object](#oauth-flows-object) | `oauth2` | **REQUIRED**. An object containing configuration information for the flow types supported. +flows | [OAuth Flows Object](#oauth-flows-object) | `oauth2` | **REQUIRED if metaDataUrl is not specified**. An object containing configuration information for the flow types supported. openIdConnectUrl | `string` | `openIdConnect` | **REQUIRED**. OpenId Connect URL to discover OAuth2 configuration values. This MUST be in the form of a URL. The OpenID Connect standard requires the use of TLS. +metaDataUrl | `string` | `oauth2` | **REQUIRED if flows is not specified**. URL to the OAuth2 AZ' configuration. The URL scheme MUST be https. See [RFC8414](https://datatracker.ietf.org/doc/html/rfc8414). This object MAY be extended with [Specification Extensions](#specification-extensions).