@stoplight/spectral/rulesets/oas/functions/oasOpSecurityDefined/index.js

A flexible object linter with out of the box support for OpenAPI v2 and v3.

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const _get = require('lodash/get');
exports.oasOpSecurityDefined = (targetVal, options) => {
    const results = [];
    const { schemesPath } = options;
    const { paths = {} } = targetVal;
    const schemes = _get(targetVal, schemesPath) || {};
    const allDefs = Object.keys(schemes);
    for (const path in paths) {
        if (Object.keys(paths[path]).length > 0)
            for (const operation in paths[path]) {
                if (operation !== 'parameters') {
                    const { security = [] } = paths[path][operation];
                    for (const index in security) {
                        if (security[index]) {
                            const securityKey = Object.keys(security[index])[0];
                            if (!allDefs.includes(securityKey)) {
                                results.push({
                                    message: 'operation referencing undefined security scheme',
                                    path: ['paths', path, operation, 'security', index],
                                });
                            }
                        }
                    }
                }
            }
    }
    return results;
};
//# sourceMappingURL=index.js.map