owasp-no-http-basic

Security scheme uses HTTP Basic. Use a more secure authentication method, like OAuth 2.0

Basic authentication credentials transported over network are more susceptible to interception than other forms of authentication, and as they are not encrypted it means passwords and tokens are more easily leaked.

It’s time to upgrade that old, janky authentication mechanism.

Bad example

openapi: "3.1.0"
info:
  version: "1.0"
components:
  securitySchemes:
    "please-hack-me":
      type: "http"
      scheme: basic

Good Example

openapi: "3.1.0"
info:
  version: "1.0"
components:
  securitySchemes:
    "someSecurityScheme":
      type: "http"
      scheme: "bearer

How do I fix this violation?

Do not use basic authentication, use a more secure authentication method (e.g., bearer).