Removal of authorizations definition from webservices

[SAPSupport]

Hi SAP Team.

We are working on upgrading hybris version to DIGITS. As per documentation provided on below link , we need to Remove the authorizations definition if it uses “oauth2_client_credentials” or “oauth2_password”.

What will be the replacement if we are removing the authorization tag as we have some secured api in our code which are client secret and password .

 Link -

Thanks,

Abhinav Mishra

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

@ApiOperation(authorizations =
{@Authorization(value = "oauth2_client_credentials")}
...)

@ApiOperation(authorizations = {
@Authorization(value = "my_auth",
scopes = {@AuthorizationScope(scope = "scope1")})
}
)

The above to annotation should be replaced by following annotation

@Operation( security =
@SecurityRequirement(name = "my_auth", scopes = {"scope1"})
)

Here is an example:

@Operation(operationId = "removeScimGroup", summary = "Delete scim group from Commerce", description = "Endpoint to delete scim group from Commerce for which id is provided", security = @SecurityRequirement(name = "oauth", scopes = "oauth2_client_credentials"))

Thanks