FAQ

  • GitHub GitHub Repo stars
  • Discord Discord Server
  • ✨ New! Try the OpenAPI Doctor ✨ The OpenAPI Doctor

    owaspNoBasicAuth


    owaspCheckErrorResponse will check that no security schemes use Basic authentication.

    Example ruleset configuration

    my-security-rule:
      description: Make sure there is no Basic auth used in the API.
      type: validation
      given: $
      then:
        function: owaspNoBasicAuth
    

    Used by the following rules: