don't check security against missing schema paths

cdimascio · Oct 24, 2019 · 1566383 · 1566383
1 parent 9c42969
commit 1566383
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/src/middlewares/openapi.security.ts b/src/middlewares/openapi.security.ts
@@ -26,8 +26,12 @@ export function security(
       return next();
     }
 
-    // const securities: OpenAPIV3.SecurityRequirementObject[] =
-    //   req.openapi.schema.security;
+    const pathSchema = req.openapi.schema;
+    if (!pathSchema) {
+      // path has no schema, let it pass security validation
+      // request middleware is in the chain and will validate downstream
+      return next();
+    }
 
     // use the local security object or fallbac to api doc's security or undefined
     const securities: OpenAPIV3.SecurityRequirementObject[] =