Inheritance of securedBy designation


The 0.8 spec says that:

To apply a securityScheme definition to every method in an API, the
API MAY be defined using the securedBy attribute. This specifies
that all methods in the API are protected using that security scheme.

I’m pretty sure this means that securedBy on the resource level applies to all of its methods. But, does it also apply to the sub resource methods as well?



So far as I know it isn’t automatically applied to all nested resources as you specify a security schema on resource level and really resource level - that applies to all resources including nested resources. That means, if you don’t want to apply a specific security scheme to your API and rather on resource level, then you have to apply it to each resource you would like to have the scheme in place.