We’re trying to specify oauth2 scopes using an openapi v3 doc.
Our securitySchema defines several scopes, and individual paths are specifying 1 or 2 of those.
For some reason, the rendered stoplight docs display all the scopes defined in the security schema, rather than the 1 or 2 defined in the path.
Security schemes section looks like this:
myentity:read: Read about my entity
The paths are defined like this:
summary: List entities xxx
description: Returns a collection of my-entities.
To work around this I could create a whole securitySchema for each scope or combination of scopes. It seems like a lot of unnecessary work though.
Am I missing something?