owasp-auth-insecure-schemes

There are many HTTP authorization schemes but some of them are now considered insecure, such as negotiating authentication using specifications like NTLM or OAuth v1.

Bad example

openapi: "3.1.0"
info:
  version: "1.0"
components:
  securitySchemes:
    "BadAuth1":
      type: http
      scheme: negotiate
    "BadAuth2":
      type: http
      scheme: oauth

Good Example

openapi: "3.1.0"
info:
  version: "1.0"
components:
  securitySchemes:
    "BearerAuth":
      type: http
      scheme: bearer

How do I fix this violation?

Use a different authorization scheme.

Refer to https://www.iana.org/assignments/http-authschemes/ to know more about HTTP Authentication Schemes.