openapi3: empty scopes are valid (#754)

getkin · Jan 28, 2023 · 84703aa · 84703aa
1 parent a3a19f0
commit 84703aa
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/openapi3/security_scheme.go b/openapi3/security_scheme.go
@@ -363,8 +363,8 @@ func (flow *OAuthFlow) Validate(ctx context.Context, opts ...ValidationOption) e
 		}
 	}
 
-	if v := flow.Scopes; len(v) == 0 {
-		return errors.New("field 'scopes' is empty or missing")
+	if flow.Scopes == nil {
+		return errors.New("field 'scopes' is missing")
 	}
 
 	return validateExtensions(ctx, flow.Extensions)

diff --git a/openapi3/security_scheme_test.go b/openapi3/security_scheme_test.go
@@ -197,7 +197,7 @@ var securitySchemeExamples = []securitySchemeExample{
     }
   }
 }`),
-		valid: false,
+		valid: true,
 	},
 
 	{