Merge pull request #14 from cerberauth/vulnapi-refactor-security-scheme

feat(vulnapi): add new security scheme properties and values
cerberauth · Dec 14, 2024 · 2928aa4 · 2928aa4
2 parents c9e55b8 + 904a9d7
commit 2928aa4
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 10 deletions.
diff --git a/schemas/vulnapi/draft/2024-10/operation-report.schema.json b/schemas/vulnapi/draft/2024-10/operation-report.schema.json
@@ -27,7 +27,7 @@
             "type": "string"
         },
         "body": {
-            "type": "object"
+            "type": "string"
         },
         "cookies": {
             "type": "array",

diff --git a/schemas/vulnapi/draft/2024-10/scan-report.schema.json b/schemas/vulnapi/draft/2024-10/scan-report.schema.json
@@ -57,8 +57,7 @@
             }
         },
         "error": {
-            "type": "object",
-            "required": []
+            "type": "object"
         }
     }
 }
diff --git a/schemas/vulnapi/draft/2024-10/security-scheme-report.schema.json b/schemas/vulnapi/draft/2024-10/security-scheme-report.schema.json
@@ -13,31 +13,41 @@
         "type": {
             "type": "string",
             "enum": [
-                "apiKey",
                 "http",
                 "oauth2",
                 "openIdConnect",
+                "apiKey",
+                "mutualTLS",
                 "none"
             ]
         },
         "scheme": {
             "type": "string",
+            "description": "Value are registered in IANA Security Scheme Name Registry",
             "enum": [
-                "basic",
-                "bearer",
-                "digest",
-                "oauth",
-                "privateToken",
-                "none"
+                "Basic",
+                "Bearer",
+                "Digest",
+                "OAuth",
+                "PrivateToken",
+                "None"
             ]
         },
         "in": {
             "type": "string",
             "enum": [
+                "query",
                 "header",
                 "cookie"
             ]
         },
+        "token_format": {
+            "type": "string",
+            "enum": [
+                "jwt",
+                "none"
+            ]
+        },
         "name": {
             "type": "string"
         }