fix(openapi): not forbidden response on openAPI doc

api-platform · Dec 24, 2024 · 5e272a1 · 5e272a1
1 parent f8dae8e
commit 5e272a1
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/OpenApi/Factory/OpenApiFactory.php b/src/OpenApi/Factory/OpenApiFactory.php
@@ -367,6 +367,13 @@ private function collectPaths(ApiResource $resource, ResourceMetadataCollection
 
             $openapiOperation = $openapiOperation->withParameters($openapiParameters);
 
+            if ($security = $operation->getSecurity()) {
+                $openapiOperation = $openapiOperation->withResponse(403, new Response(\sprintf(
+                    'Access forbidden: You must meet the following condition(s) to access this resource: %s.',
+                    $security
+                )));
+            }
+
             $existingResponses = $openapiOperation?->getResponses() ?: [];
             $overrideResponses = $operation->getExtraProperties()[self::OVERRIDE_OPENAPI_RESPONSES] ?? $this->openApiOptions->getOverrideResponses();
             if ($operation instanceof HttpOperation && null !== ($errors = $operation->getErrors())) {