From 6da8d26d70b1addb39818dd82f8d7357104e7ae2 Mon Sep 17 00:00:00 2001
From: Ralf Handl <ralf.handl@gmail.com>
Date: Fri, 28 Feb 2025 21:02:01 +0100
Subject: [PATCH 1/2] New fixed fields in Security Scheme Object

Fixes #3400
---
 src/schemas/validation/schema.yaml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/src/schemas/validation/schema.yaml b/src/schemas/validation/schema.yaml
index 88148f6847..b20dbc1a35 100644
--- a/src/schemas/validation/schema.yaml
+++ b/src/schemas/validation/schema.yaml
@@ -749,6 +749,9 @@ $defs:
           - openIdConnect
       description:
         type: string
+      deprecated:
+        default: false
+        type: boolean
     required:
       - type
     allOf:
@@ -822,6 +825,9 @@ $defs:
           properties:
             flows:
               $ref: '#/$defs/oauth-flows'
+            oauth2MetadataUrl:
+              type: string
+              format: uri-reference
           required:
             - flows
 
@@ -861,6 +867,8 @@ $defs:
         $ref: '#/$defs/oauth-flows/$defs/client-credentials'
       authorizationCode:
         $ref: '#/$defs/oauth-flows/$defs/authorization-code'
+      deviceAuthorization:
+        $ref: '#/$defs/oauth-flows/$defs/device-authorization'
     $ref: '#/$defs/specification-extensions'
     unevaluatedProperties: false
 
@@ -937,6 +945,27 @@ $defs:
         $ref: '#/$defs/specification-extensions'
         unevaluatedProperties: false
 
+      device-authorization:
+        type: object
+        properties:
+          deviceAuthorizationUrl:
+            type: string
+            format: uri-reference
+          tokenUrl:
+            type: string
+            format: uri-reference
+          refreshUrl:
+            type: string
+            format: uri
+          scopes:
+            $ref: '#/$defs/map-of-strings'
+        required:
+          - authorizationUrl
+          - tokenUrl
+          - scopes
+        $ref: '#/$defs/specification-extensions'
+        unevaluatedProperties: false
+
   security-requirement:
     $comment: https://spec.openapis.org/oas/v3.1#security-requirement-object
     type: object

From 2e745dc332620f473d434156800139ff8249c2a7 Mon Sep 17 00:00:00 2001
From: Ralf Handl <ralf.handl@sap.com>
Date: Sat, 1 Mar 2025 17:14:27 +0100
Subject: [PATCH 2/2] refreshUrl is a uri-reference

---
 src/schemas/validation/schema.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/schemas/validation/schema.yaml b/src/schemas/validation/schema.yaml
index b20dbc1a35..3a8d2cb186 100644
--- a/src/schemas/validation/schema.yaml
+++ b/src/schemas/validation/schema.yaml
@@ -956,7 +956,7 @@ $defs:
             format: uri-reference
           refreshUrl:
             type: string
-            format: uri
+            format: uri-reference
           scopes:
             $ref: '#/$defs/map-of-strings'
         required: