API contracts
11 rules
API security
Exposure conflicts with authentication Declared exposure agrees with effective OpenAPI security.
rest/security/exposure-contradiction error Literal HTTP server URL Literal OpenAPI server URLs use transport security. rest/security/insecure-server warning OAuth implicit flow OAuth schemes prefer code-based flows over the legacy implicit flow. rest/security/oauth-implicit-grant warning OAuth password flow OAuth schemes avoid exposing resource-owner credentials to clients. rest/security/oauth-password-grant error