Selective API security application

Hi, 

I have an OpenAPI spec I built. All endpoints in the spec use some form of security (API Key, Token). Of course, the login endpoint does not use security when acquiring the login token. How can I represent in OpenAPI that the user does not need to use a Token for a specific endpoint while using some security scheme in other endpoints.

Thanks