Forum Discussion

Quam's avatar
Quam
New Contributor
4 years ago

How to specify OR logic for scopes in security oauth2

Hello, I have to implements a case of authentication that would accept oneOf provided scopes: OAUTH2 [scope1 OR scope2]. I've try different configurations whithout success, logic AND is always take...
Quam's avatar
Quam
New Contributor

Thanks for replying HKosova 

Looks like with that implementation, the only way to be authorized is to provide a token with both scopes Scope1, Scope2.

Unless I'm always getting 403

HKosova's avatar
HKosova
SmartBear Alumni (Retired)
4 years ago

This sounds like an issue with your server-side framework or OAuth library - maybe it doesn't support OpenAPI OR logic. Check the documentation on your framework/library, and if you don't find an answers there, file a ticket with them for further support.