API keys transported in a header over network
Hi Team, I have followed the swagger 2.0 for preparing my swaggers. I was trying to code the apikey authentication in my swaggers. I have followed the below document https://swagger.io/docs/spec...
Forum Discussion
Hey adurthisridhar,
Are you using third-party API security scanning tools here in conjunction with your Swagger definitions?
If so, then please refer to the configuration options of those tools to ensure conformity etc.
In general, the reason the warning/scan errors above for APIKeys is because they are regarded as less secure than other more secure authentication methods, like OAuth 2.0, which issue tokens that have a limited lifetime.
Cheers,
Frank
