View source for OpenAPI Authentication and Authorization

=External=
* https://swagger.io/docs/specification/authentication
=Internal=
* [[OpenAPI#Authentication_and_Authorization|Open API]]
=Overview=
This applies to OpenAPI 3.0.

OpenAPI uses the term '''security scheme''' for authentication and authorization schemes. OpenAPI 3.0 supports the following security schemes:

* HTTP authentication schemes, based on the <code>Authorization</code> header.
** Basic
** Bearer token
** Other schemes defined by RFC7245.
* API keys in headers, query strings and cookies.
** Cookie authentication. 
* OAuth 2
* OpenID Connect Discovery.

=HTTP Authentication=
==Bearer==