feat(http)!: named security schemes, OpenAPI's model - #89

Merged

btravers merged 18 commits into

mainfrom

feat/named-security-schemes

Aug 23, 2026

Commits on Aug 22, 2026

feat(contract)!: the marker carries OpenAPI requirements, not a boolean
btravers
committed
2022607
feat(http): the principal is bare for one scheme and tagged for many
btravers
committed
55bcbf6
fix(http): schemesOf is the union of scheme names, not their intersection
btravers
committed
3b95be2
feat(http)!: an authenticator names a scheme and the scopes it grants
btravers
committed
71e4ec2
feat(http)!: a record's requirements are the default, a procedure's replace them
btravers
committed
80ed7ff
feat(http)!: defineHttp is the one door, and it infers its registry
btravers
committed
c0f3af6
feat(http)!: a router declares one dep per scheme its contract names
btravers
committed
b6b37da
feat(http)!: requirements are tried in order, and a defect stops the walk
btravers
committed
23c1b38
feat(http)!: the sugar carries the authenticators, so an application never lists them
btravers
committed
fe68220
fix(http): a declared scope is enforced, and tagging counts schemes
btravers
committed
495dd1d
feat(examples)!: the API contract names a scope and a second scheme
btravers
committed
cec785c
feat(examples)!: the API declares two schemes and a scope in one call
btravers
committed
5863df9
fix(examples): the bearer token's scope segment survives its own delimiter
btravers
committed
1364d0d
docs: named security schemes, and the sentence that admits scopes
btravers
committed
54de3fa
fix(http)!: a scoped grant is branded, and a requirement names one scheme
btravers
committed
a4516c9
docs: the sugar's expansion compiles, and no page imports a deleted export
btravers
committed
d5bf033
fix(docs): the authenticator sample was ungated, and it had drifted
btravers
committed
ef171a8

Commits on Aug 23, 2026

test(contract): the registry is a WeakMap, and the cast now says so
btravers
committed
74c13f1

Navigation Menu

Uh oh!

feat(http)!: named security schemes, OpenAPI's model - #89

feat(http)!: named security schemes, OpenAPI's model#89
btravers merged 18 commits into
mainfrom
feat/named-security-schemes

Commits on Aug 22, 2026

feat(contract)!: the marker carries OpenAPI requirements, not a boolean

feat(http): the principal is bare for one scheme and tagged for many

fix(http): schemesOf is the union of scheme names, not their intersection

feat(http)!: an authenticator names a scheme and the scopes it grants

feat(http)!: a record's requirements are the default, a procedure's replace them

feat(http)!: defineHttp is the one door, and it infers its registry

feat(http)!: a router declares one dep per scheme its contract names

feat(http)!: requirements are tried in order, and a defect stops the walk

feat(http)!: the sugar carries the authenticators, so an application never lists them

fix(http): a declared scope is enforced, and tagging counts schemes

feat(examples)!: the API contract names a scope and a second scheme

feat(examples)!: the API declares two schemes and a scope in one call

fix(examples): the bearer token's scope segment survives its own delimiter

docs: named security schemes, and the sentence that admits scopes

fix(http)!: a scoped grant is branded, and a requirement names one scheme

docs: the sugar's expansion compiles, and no page imports a deleted export

fix(docs): the authenticator sample was ungated, and it had drifted

Commits on Aug 23, 2026

test(contract): the registry is a WeakMap, and the cast now says so