Configurable incompatible checks - SecurityRequirement

core/src/main/java/org/openapitools/openapidiff/core/compare/SecurityRequirementDiff.java

@@ -66,7 +66,7 @@ public DeferredChanged<ChangedSecurityRequirement> diff(
     DeferredBuilder<Changed> builder = new DeferredBuilder<>();
 
     ChangedSecurityRequirement changedSecurityRequirement =
-        new ChangedSecurityRequirement(left, right != null ? getCopy(right) : null);
+        new ChangedSecurityRequirement(left, right != null ? getCopy(right) : null, context);
 
     SecurityRequirement leftRequirement = left == null ? new SecurityRequirement() : left;
     SecurityRequirement rightRequirement = right == null ? new SecurityRequirement() : right;

core/src/main/java/org/openapitools/openapidiff/core/model/BackwardIncompatibleProp.java

@@ -37,6 +37,8 @@ public enum BackwardIncompatibleProp {
   RESPONSE_RESPONSES_DECREASED("incompatible.response.responses.decreased", true),
   RESPONSE_WRITEONLY_INCREASED("incompatible.response.writeonly.increased", true),
   RESPONSE_WRITEONLY_REQUIRED_DECREASED("incompatible.response.writeonly.required.decreased", true),
+  SECURITY_REQUIREMENT_SCHEMES_INCREASED(
+      "incompatible.security.requirement.schemes.increased", true),
   SECURITY_SCHEME_BEARER_FORMAT_CHANGED("incompatible.security.scheme.bearer.format.changed", true),
   SECURITY_SCHEME_OPENIDCONNECT_URL_CHANGED(
       "incompatible.security.scheme.openidconnect.url.changed", true),

core/src/main/java/org/openapitools/openapidiff/core/model/ChangedSecurityRequirement.java

@@ -1,5 +1,7 @@
 package org.openapitools.openapidiff.core.model;
 
+import static org.openapitools.openapidiff.core.model.BackwardIncompatibleProp.SECURITY_REQUIREMENT_SCHEMES_INCREASED;
+
 import io.swagger.v3.oas.models.security.SecurityRequirement;
 import java.util.ArrayList;
 import java.util.List;
@@ -8,14 +10,18 @@
 public class ChangedSecurityRequirement implements ComposedChanged {
   private SecurityRequirement oldSecurityRequirement;
   private SecurityRequirement newSecurityRequirement;
+  private final DiffContext context;
   private SecurityRequirement missing;
   private SecurityRequirement increased;
   private List<ChangedSecurityScheme> changed;
 
   public ChangedSecurityRequirement(
-      SecurityRequirement oldSecurityRequirement, SecurityRequirement newSecurityRequirement) {
+      SecurityRequirement oldSecurityRequirement,
+      SecurityRequirement newSecurityRequirement,
+      DiffContext context) {
     this.oldSecurityRequirement = oldSecurityRequirement;
     this.newSecurityRequirement = newSecurityRequirement;
+    this.context = context;
     this.changed = new ArrayList<>();
   }
 
@@ -29,10 +35,12 @@ public DiffResult isCoreChanged() {
     if (increased == null && missing == null) {
       return DiffResult.NO_CHANGES;
     }
-    if (increased == null) {
-      return DiffResult.COMPATIBLE;
+    if (increased != null) {
+      if (SECURITY_REQUIREMENT_SCHEMES_INCREASED.enabled(context)) {
+        return DiffResult.INCOMPATIBLE;
+      }
     }
-    return DiffResult.INCOMPATIBLE;
+    return DiffResult.COMPATIBLE;
   }
 
   public void addMissing(String key, List<String> scopes) {

core/src/test/java/org/openapitools/openapidiff/core/backcompat/SecurityRequirementBCTest.java

@@ -1,8 +1,10 @@
 package org.openapitools.openapidiff.core.backcompat;
 
 import static org.openapitools.openapidiff.core.TestUtils.*;
+import static org.openapitools.openapidiff.core.model.BackwardIncompatibleProp.SECURITY_REQUIREMENT_SCHEMES_INCREASED;
 
 import org.junit.jupiter.api.Test;
+import org.openapitools.openapidiff.core.model.BackwardIncompatibleProp;
 
 public class SecurityRequirementBCTest {
   private final String BASE = "bc_security_requirement_base.yaml";
@@ -19,6 +21,7 @@ public void changedButCompatible() {
 
   @Test
   public void schemesIncreased() {
-    assertOpenApiBackwardIncompatible(BASE, "bc_security_requirement_schemes_increased.yaml");
+    BackwardIncompatibleProp prop = SECURITY_REQUIREMENT_SCHEMES_INCREASED;
+    assertSpecIncompatible(BASE, "bc_security_requirement_schemes_increased.yaml", prop);
   }
 }