feat: SecurityRequirementObject

Author: omermecitoglu

src/index.ts

@@ -1,6 +1,7 @@
 import type { ComponentsObject } from "./components";
 import type { InfoObject } from "./info";
 import type { PathsObject } from "./paths";
+import type { SecurityRequirementObject } from "./security-requirement";
 import type { ServerObject } from "./server";
 import type { TagObject } from "./tag";
 
@@ -41,7 +42,7 @@ export type OpenApiDocument = {
   /**
    * A declaration of which security mechanisms can be used across the API. The list of values includes alternative security requirement objects that can be used. Only one of the security requirement objects need to be satisfied to authorize a request. Individual operations can override this definition. To make security optional, an empty security requirement ({}) can be included in the array.
    */
-  security?: unknown,
+  security?: SecurityRequirementObject[],
   /**
    * A list of tags used by the document with additional metadata. The order of the tags can be used to reflect on their order by the parsing tools. Not all tags that are used by the Operation Object must be declared. The tags that are not declared MAY be organized randomly or based on the tools' logic. Each tag name in the list MUST be unique.
    */

src/operation.ts

@@ -2,6 +2,7 @@ import type { ParameterObject } from "./parameter";
 import type { ReferenceObject } from "./reference";
 import type { RequestBodyObject } from "./request-body";
 import type { ResponsesObject } from "./response";
+import type { SecurityRequirementObject } from "./security-requirement";
 
 /**
  * Describes a single API operation on a path.
@@ -50,7 +51,7 @@ export type OperationObject = {
   /**
    * A declaration of which security mechanisms can be used for this operation. The list of values includes alternative security requirement objects that can be used. Only one of the security requirement objects need to be satisfied to authorize a request. To make security optional, an empty security requirement ({}) can be included in the array. This definition overrides any declared top-level security. To remove a top-level security declaration, an empty array can be used.
    */
-  security?: unknown,
+  security?: SecurityRequirementObject[],
   /**
    * An alternative server array to service this operation. If an alternative server object is specified at the Path Item Object or Root level, it will be overridden by this value.
    */

src/security-requirement.ts

@@ -0,0 +1,4 @@
+/**
+ * Lists the required security schemes to execute this operation.
+ */
+export type SecurityRequirementObject = Record<string, string[]>;