Selective API security application

[stephb]

Hi, 

I have an OpenAPI spec I built. All endpoints in the spec use some form of security (API Key, Token). Of course, the login endpoint does not use security when acquiring the login token. How can I represent in OpenAPI that the user does not need to use a Token for a specific endpoint while using some security scheme in other endpoints.

Thanks

[HKosova]

paths:
  /login:
    post:
      security: []   # <--- No security
      ...