Skip to content

Commit b4050db

Browse files
Replace default basicAuth scheme with bearerAuth in OpenAPI spec
Basic auth is dated; the generated spec now defaults to HTTP Bearer token authentication to match modern Axis2 REST service patterns. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent f4efcaf commit b4050db

4 files changed

Lines changed: 14 additions & 15 deletions

File tree

modules/openapi/src/main/java/org/apache/axis2/openapi/OpenApiConfiguration.java

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -196,12 +196,12 @@ public void loadConfiguration() {
196196
* Load default configuration values.
197197
*/
198198
private void loadDefaultConfiguration() {
199-
// Add default security scheme
200-
SecurityScheme basicAuth = new SecurityScheme();
201-
basicAuth.setType(SecurityScheme.Type.HTTP);
202-
basicAuth.setScheme("basic");
203-
basicAuth.setDescription("Basic Authentication");
204-
securityDefinitions.put("basicAuth", basicAuth);
199+
// Add default security scheme — Bearer token auth
200+
SecurityScheme bearerAuth = new SecurityScheme();
201+
bearerAuth.setType(SecurityScheme.Type.HTTP);
202+
bearerAuth.setScheme("bearer");
203+
bearerAuth.setDescription("Bearer token authentication");
204+
securityDefinitions.put("bearerAuth", bearerAuth);
205205
}
206206

207207
/**

modules/openapi/src/main/java/org/apache/axis2/openapi/OpenApiModule.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@
4545
* Key features (Enhanced in v2.0.1):
4646
* - Automatic OpenAPI 3.0.1 specification generation from service metadata
4747
* - Comprehensive configuration system with properties file support
48-
* - Security schemes integration (OAuth2, API Key, Basic Auth, etc.)
48+
* - Security schemes integration (OAuth2, API Key, Bearer token, etc.)
4949
* - Advanced customization via OpenApiCustomizer interface
5050
* - Swagger UI integration for interactive API documentation
5151
* - Resource filtering and route management

modules/openapi/src/test/java/org/apache/axis2/openapi/AdvancedGuideIntegrationTest.java

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -268,12 +268,11 @@ public void testMultiSecuritySchemeScenario() throws Exception {
268268
assertTrue("Should have at least one security scheme", securitySchemes.size() >= 1);
269269

270270
// Verify multiple authentication options are available
271-
boolean hasBasicAuth = securitySchemes.containsKey("basicAuth");
272271
boolean hasBearerAuth = securitySchemes.containsKey("bearerAuth");
273272
boolean hasApiKey = securitySchemes.containsKey("apiKey");
274273
boolean hasOAuth2 = securitySchemes.containsKey("oauth2");
275274

276-
assertTrue("Should have basic authentication by default", hasBasicAuth);
275+
assertTrue("Should have bearer token authentication by default", hasBearerAuth);
277276

278277
// Test that operations can use different security schemes
279278
Map<String, PathItem> paths = openApi.getPaths();

modules/openapi/src/test/java/org/apache/axis2/openapi/OpenApiConfigurationTest.java

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -81,11 +81,11 @@ public void testDefaultCollections() {
8181
assertNotNull(config.getSecurityDefinitions());
8282
assertNotNull(config.getSwaggerUiMediaTypes());
8383

84-
// Should have default security scheme
85-
assertTrue(config.getSecurityDefinitions().containsKey("basicAuth"));
86-
SecurityScheme basicAuth = config.getSecurityDefinitions().get("basicAuth");
87-
assertEquals(SecurityScheme.Type.HTTP, basicAuth.getType());
88-
assertEquals("basic", basicAuth.getScheme());
84+
// Should have default security scheme (Bearer token)
85+
assertTrue(config.getSecurityDefinitions().containsKey("bearerAuth"));
86+
SecurityScheme bearerAuth = config.getSecurityDefinitions().get("bearerAuth");
87+
assertEquals(SecurityScheme.Type.HTTP, bearerAuth.getType());
88+
assertEquals("bearer", bearerAuth.getScheme());
8989
}
9090

9191
@Test
@@ -456,7 +456,7 @@ public void testLargeConfigurationPerformance() {
456456
assertEquals(10000, config.getResourcePackages().size());
457457
assertEquals(10000, config.getResourceClasses().size());
458458
assertEquals(10000, config.getIgnoredRoutes().size());
459-
// +1 for default basicAuth scheme
459+
// +1 for default bearerAuth scheme
460460
assertEquals(10001, config.getSecurityDefinitions().size());
461461
}
462462

0 commit comments

Comments
 (0)