Skip to content

Complete OAuth2 tutorial #28

Complete OAuth2 tutorial

Complete OAuth2 tutorial #28

Triggered via push February 26, 2024 17:22
Status Failure
Total duration 2m 24s
Artifacts

openapi.yml

on: push
Lint and validate OpenAPI document for pygeoapi configuration
1m 19s
Lint and validate OpenAPI document for pygeoapi configuration
Validate OpenAPI document against OWASP Top 10 API security rules
2m 14s
Validate OpenAPI document against OWASP Top 10 API security rules
Fit to window
Zoom out
Zoom in

Annotations

246 errors, 130 warnings, and 1 notice
oas3-valid-schema-example: pygeoapi-openapi.json#L1214
"default" property type must be string
Lint and validate OpenAPI document for pygeoapi configuration
fatal issues detected. Failing the process.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/inputValueNoObject.yaml#L2
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ProcessList.yaml#L1
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L3
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L3
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L3
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L5
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L3
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/descriptionType.yaml#L3
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L5
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ExecuteAsync.yaml#L2
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L5
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/NotFound.yaml#L1
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L5
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/additionalParameter.yaml#L6
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L5
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L5
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ExecuteAsync.yaml#L4
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/descriptionType.yaml#L5
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L9
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ServerError.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/processSummary.yaml#L8
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ExecuteAsync.yaml#L8
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ServerError.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/NotFound.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L9
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/processSummary.yaml#L10
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L13
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/descriptionType.yaml#L9
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/NotFound.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L9
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L13
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L13
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/additionalParameter.yaml#L12
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L13
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L15
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L13
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L16
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L15
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/subscriber.yaml#L14
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L10
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/subscriber.yaml#L11
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L25
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L17
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L19
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L22
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L28
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L17
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L13
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L16
Schema of type string must specify maxLength, enum, or const.
owasp:api7:2019-security-hosts-https-oas3: pygeoapi-openapi.json#L25
Server URLs MUST begin https://, and no other protocol is permitted.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L10
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/bbox.yaml#L14
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L135
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L139
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L143
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L135
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L143
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L159
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L108
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L166
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L203
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L205
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-array-limit: pygeoapi-openapi.json#L293
Schema of type array must specify maxItems.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L205
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L166
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L301
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L340
Schema of type integer must specify minimum and maximum.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L327
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L108
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L353
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L139
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L340
Schema of type integer must specify format (int32 or int64).
owasp:api1:2019-no-numeric-ids: pygeoapi-openapi.json#L340
OWASP API1:2019 - Use random IDs that cannot be guessed. UUIDs are preferred.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L353
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L327
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L203
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/subscriber.yaml#L17
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L398
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L395
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L395
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L159
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L361
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L361
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L398
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L404
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L434
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L437
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L428
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L434
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L431
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L431
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L440
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L440
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L437
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L737
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L752
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L737
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L750
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L724
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L750
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L711
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L724
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L817
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L750
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L819
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L750
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L855
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L865
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L855
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L817
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L867
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L865
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L857
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L788
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L922
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L881
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L881
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1078
Schema of type string must specify maxLength, enum, or const.
owasp:api2:2019-protection-global-unsafe: pygeoapi-openapi.json#L1108
This operation is not protected by any security scheme.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1121
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1158
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1121
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1078
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1203
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1203
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1158
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L558
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L601
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L685
Schema of type integer must specify minimum and maximum.
owasp:api4:2019-array-limit: pygeoapi-openapi.json#L649
Schema of type array must specify maxItems.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L538
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L564
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L601
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L698
Schema of type integer must specify format (int32 or int64).
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L711
Schema of type string must specify a format, pattern, enum, or const.
owasp:api1:2019-no-numeric-ids: pygeoapi-openapi.json#L685
OWASP API1:2019 - Use random IDs that cannot be guessed. UUIDs are preferred.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L685
Schema of type integer must specify format (int32 or int64).
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L428
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L698
Schema of type integer must specify minimum and maximum.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L699
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1218
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1199
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1199
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L1261
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1349
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L1245
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1218
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1207
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1207
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L1398
Schema of type integer must specify format (int32 or int64).
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1211
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-array-limit: pygeoapi-openapi.json#L1317
Schema of type array must specify maxItems.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1211
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1383
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1222
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L1413
Schema of type integer must specify format (int32 or int64).
owasp:api2:2019-jwt-best-practices: pygeoapi-openapi.json#L1453
Security schemes using JWTs must explicitly declare support for RFC8725 in the description.
owasp:api4:2019-array-limit: pygeoapi-openapi.json#L1235
Schema of type array must specify maxItems.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1443
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1319
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L1398
Schema of type integer must specify minimum and maximum.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L1248
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1319
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1443
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L1413
Schema of type integer must specify minimum and maximum.
Validate OpenAPI document against OWASP Top 10 API security rules
fatal issues detected. Failing the process.
oas3-unused-component: pygeoapi-openapi.json#L1311
Potentially unused component has been detected.
oas3-unused-component: pygeoapi-openapi.json#L1438
Potentially unused component has been detected.
oas3-unused-component: pygeoapi-openapi.json#L1392
Potentially unused component has been detected.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L100
Operation is missing responses[500].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L100
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L135
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L135
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L46
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L46
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L46
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L46
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L100
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L135
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L100
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L100
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L135
Operation is missing rate limiting response in responses[429].content.
owasp:api6:2019-no-additionalProperties: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L17
If the additionalProperties keyword is used it must be set to false.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L100
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L205
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L170
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L205
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L170
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L170
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L170
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L205
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L205
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L375
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L375
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L403
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L403
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L375
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L403
Operation is missing responses[500].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L403
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L403
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L403
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L460
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L375
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L460
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L460
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L460
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L403
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L787
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L759
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L787
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L759
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L787
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L787
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L787
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L759
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L787
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L844
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L759
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L888
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L921
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L787
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L844
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L844
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L921
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L844
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L888
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L888
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L971
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L942
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L942
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L921
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L971
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L942
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1012
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L921
Operation is missing responses[401].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L921
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L921
Operation is missing responses[500].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1012
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L921
Operation is missing responses[500].
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L942
Missing error response of either 400, 422 or 4XX.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L942
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1045
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1045
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L942
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L971
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L942
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1090
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1012
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L971
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L971
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1090
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L971
Operation is missing responses[401].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1045
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L971
Missing error response of either 400, 422 or 4XX.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L888
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1045
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1045
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1130
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1090
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1012
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1130
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1045
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1090
Operation is missing responses[401].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1012
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1130
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1170
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1170
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1090
Operation is missing responses[500].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1090
Missing error response of either 400, 422 or 4XX.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1130
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1130
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1130
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1170
Operation is missing responses[500].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L504
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1090
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1130
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L537
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1170
Operation is missing responses[500].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1170
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L504
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1170
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L504
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L537
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1045
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L561
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L504
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L537
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L537
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L537
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L537
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L561
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L561
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L561
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L537
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1170
Operation is missing responses[401].content.
owasp:api6:2019-no-additionalProperties: pygeoapi-openapi.json#L1431
If the additionalProperties keyword is used it must be set to false.
owasp:api2:2019-protection-global-unsafe-strict: pygeoapi-openapi.json#L1108
This operation is not protected by any security scheme.