feat: Support securitySchemes - #60

Merged

thced merged 23 commits into

masterfrom

feat/security-schemes-design

May 18, 2026

Commits on May 18, 2026

docs: Security schemes (OpenAPI 3.1) design spec
thced
committed
555b3aa
docs: Security schemes implementation plan (16 tasks)
thced
committed
8767a93
feat(spec): Add SecurityScheme sealed model + parser
thced
committed
33c3ece
feat(spec): Add SecurityRequirement model + parser
thced
committed
e7f1295
fix(spec): Drop unused @SuppressWarnings on parseRequirements
thced
committed
94100e8
feat(spec): Parse securitySchemes + root security into Spec
thced
committed
2df1385
feat(spec): Add per-operation security with root-override semantics
thced
committed
017ea20
feat: Add public Credential sealed type and SchemeValidator interface
thced
committed
7a99f14
feat(internal): Add CredentialExtractor for apiKey/bearer/basic
thced
committed
83b9937
feat: Add Request.principals and withPrincipals immutable copy
thced
committed
fa3a490
feat(internal): SecurityFilter happy path (single-scheme allow)
thced
committed
aa9732b
feat(internal): SecurityFilter renders 401/403 with WWW-Authenticate
thced
committed
480bc43
test(internal): Cover OR-of-AND evaluation in SecurityFilter
thced
committed
e11ce37
feat: Add securityValidator and useExternalAuthentication builder methods
thced
committed
5b35d8f
feat: Wire SecurityFilter into the request-processing chain
thced
committed
dbd03c9
feat: Fail fast at boot if security validators are missing
thced
committed
8e82dcc
test(internal): Cover useExternalAuthentication bypass in SecurityFilter
thced
committed
9e816f8
test: Add /api/v1/secure/* operations and securitySchemes fixture
thced
committed
6ee6910
test: SecurityIT — end-to-end 200/401/403 + external-auth bypass
thced
committed
cb0ed29
docs: Document security schemes, validators, principals, and external-auth opt-out
thced
committed
91de0e9
fix: Address Sonar S1192 and S107 in security additions
thced
committed
4553f99
fix(internal): Use HTTP status constants and record pattern in SecurityFilter
thced
committed
5ddd64f
fix(internal): Use deconstruction pattern for GroupOutcome.Allowed
thced
committed
7302fc4

Navigation Menu

feat: Support securitySchemes - #60

feat: Support securitySchemes#60
thced merged 23 commits into
masterfrom
feat/security-schemes-design

Commits on May 18, 2026

docs: Security schemes (OpenAPI 3.1) design spec

docs: Security schemes implementation plan (16 tasks)

feat(spec): Add SecurityScheme sealed model + parser

feat(spec): Add SecurityRequirement model + parser

fix(spec): Drop unused @SuppressWarnings on parseRequirements

feat(spec): Parse securitySchemes + root security into Spec

feat(spec): Add per-operation security with root-override semantics

feat: Add public Credential sealed type and SchemeValidator interface

feat(internal): Add CredentialExtractor for apiKey/bearer/basic

feat: Add Request.principals and withPrincipals immutable copy

feat(internal): SecurityFilter happy path (single-scheme allow)

feat(internal): SecurityFilter renders 401/403 with WWW-Authenticate

test(internal): Cover OR-of-AND evaluation in SecurityFilter

feat: Add securityValidator and useExternalAuthentication builder methods

feat: Wire SecurityFilter into the request-processing chain

feat: Fail fast at boot if security validators are missing

test(internal): Cover useExternalAuthentication bypass in SecurityFilter

test: Add /api/v1/secure/* operations and securitySchemes fixture

test: SecurityIT — end-to-end 200/401/403 + external-auth bypass

docs: Document security schemes, validators, principals, and external-auth opt-out

fix: Address Sonar S1192 and S107 in security additions

fix(internal): Use HTTP status constants and record pattern in SecurityFilter

fix(internal): Use deconstruction pattern for GroupOutcome.Allowed