Forum Discussion

Quam's avatar
Quam
New Contributor
4 years ago

How to specify OR logic for scopes in security oauth2

Hello, I have to implements a case of authentication that would accept oneOf provided scopes: OAUTH2 [scope1 OR scope2]. I've try different configurations whithout success, logic AND is always take...
HKosova's avatar
HKosova
SmartBear Alumni (Retired)

Hi Quam,

Your first example is the correct way to represent "scope1 OR scope2".

What do you mean by "logic AND is always taken in consideration"?

Quam's avatar
Quam
New Contributor
4 years ago

Thanks for replying HKosova 

Looks like with that implementation, the only way to be authorized is to provide a token with both scopes Scope1, Scope2.

Unless I'm always getting 403

  • HKosova's avatar
    HKosova
    SmartBear Alumni (Retired)
    4 years ago

    This sounds like an issue with your server-side framework or OAuth library - maybe it doesn't support OpenAPI OR logic. Check the documentation on your framework/library, and if you don't find an answers there, file a ticket with them for further support.