You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
the syntax of this $ref is valid, and since it refers to an external document, we do not know whether it is valid or not, so there is nothing to fix here.
description was added to the schema via commit 747ccc8, but it appears that the specification text was not also amended. We should fix the specification, as the intent to add description is valid.
For 2 - the syntax is valid, but -to me- having an unresolvable reference violates the structural rules of the JSON Schema OAI builds upon and I'm not aware of exceptions within OAI to allow this.
Can you point me somewhere to look this up?
It's not an unresolveable reference. It's a reference to another document. When parsing this document, we can't expect that all $refs to external documents are already "known", otherwise it would be impossible to have two documents that each referenced each other. Only at runtime, when the $ref is being resolved and we want to access the data in that other document, can we determine if the $ref is invalid or not.
However, I do note another issue with this example: the $ref is pointing to ...openapi.json#/components/externalDocs/... which is not a valid destination (there is no externalDocs property under components). This should instead be pointing to .../components/securitySchemes/....
Activity
karenetheridge commentedon Oct 27, 2026
id, notpetId.$refis valid, and since it refers to an external document, we do not know whether it is valid or not, so there is nothing to fix here.descriptionwas added to the schema via commit 747ccc8, but it appears that the specification text was not also amended. We should fix the specification, as the intent to adddescriptionis valid.commonism commentedon Oct 29, 2026
Hi,
thanks for your input.
For 2 - the syntax is valid, but -to me- having an unresolvable reference violates the structural rules of the JSON Schema OAI builds upon and I'm not aware of exceptions within OAI to allow this.
Can you point me somewhere to look this up?
karenetheridge commentedon Oct 29, 2026
It's not an unresolveable reference. It's a reference to another document. When parsing this document, we can't expect that all
$refs to external documents are already "known", otherwise it would be impossible to have two documents that each referenced each other. Only at runtime, when the$refis being resolved and we want to access the data in that other document, can we determine if the$refis invalid or not.However, I do note another issue with this example: the
$refis pointing to...openapi.json#/components/externalDocs/...which is not a valid destination (there is noexternalDocsproperty undercomponents). This should instead be pointing to.../components/securitySchemes/....fix some tests, as noted in OAI#5575
karenetheridge commentedon Oct 29, 2026
I prepared a fix in #5580 and #5581.
karenetheridge commentedon Oct 29, 2026
The specification for the media type object has been amended in #5583 and #5584.
commonism commentedon Oct 30, 2026
Would it be possible to reference a resource which allows using the security-scheme-object-examples.yaml example for runtime?