@pactflow/openapi-pact-comparator 1.5.0 → 1.5.1

package/dist/index.cjs

@@ -3707,7 +3707,7 @@ const minimumSchema = (originalSchema, oas) => {
         const ref = refToAdd.shift();
         const path = splitPath(ref);
         refAdded.push(ref);
-        const subschema = cloneDeep(get$1(oas, path));
+        const subschema = cloneDeep(get$1(oas, path, {}));
         delete subschema.description;
         delete subschema.example;
         traverse(subschema, collectReferences);
@@ -7621,9 +7621,9 @@ function* compareReqSecurity(ajv, route, interaction, index, config) {
             }
             for (const schemeName of Object.keys(scheme)) {
                 const scheme = securitySchemes[schemeName];
-                switch (scheme?.type) {
-                    case "apiKey":
-                        switch (scheme.in) {
+                switch (scheme?.type?.toLowerCase()) {
+                    case "apikey":
+                        switch (scheme.in.toLowerCase()) {
                             case "header":
                                 if (requestHeaders.has(scheme.name)) {
                                     isSecured = true;
@@ -7718,7 +7718,7 @@ function* compareReqSecurity(ajv, route, interaction, index, config) {
                             isValidSchema = requestHeaders.get("authorization") !== null;
                         }
                         else {
-                            switch (scheme.scheme) {
+                            switch (scheme.scheme.toLowerCase()) {
                                 case "basic":
                                     isValidSchema = auth.toLowerCase().startsWith("basic ");
                                     break;
@@ -7750,9 +7750,9 @@ function* compareReqSecurity(ajv, route, interaction, index, config) {
                         }
                         break;
                     }
-                    case "mutualTLS":
+                    case "mutualtls":
                     case "oauth2":
-                    case "openIdConnect":
+                    case "openidconnect":
                         // nothing can be validated, assume meets security requirements
                         isSecured = true;
                         break;