{"action":"created","issue":{"url":"https://api.github.com/repos/swagger-api/swagger-spec/issues/515","labels_url":"https://api.github.com/repos/swagger-api/swagger-spec/issues/515/labels{/name}","comments_url":"https://api.github.com/repos/swagger-api/swagger-spec/issues/515/comments","events_url":"https://api.github.com/repos/swagger-api/swagger-spec/issues/515/events","html_url":"https://github.com/swagger-api/swagger-spec/issues/515","id":118441812,"number":515,"title":"Multiple Security Schemes in Security Requirement Object","user":{"login":"stevendearborn","id":6518685,"avatar_url":"https://avatars.githubusercontent.com/u/6518685?v=3","gravatar_id":"","url":"https://api.github.com/users/stevendearborn","html_url":"https://github.com/stevendearborn","followers_url":"https://api.github.com/users/stevendearborn/followers","following_url":"https://api.github.com/users/stevendearborn/following{/other_user}","gists_url":"https://api.github.com/users/stevendearborn/gists{/gist_id}","starred_url":"https://api.github.com/users/stevendearborn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stevendearborn/subscriptions","organizations_url":"https://api.github.com/users/stevendearborn/orgs","repos_url":"https://api.github.com/users/stevendearborn/repos","events_url":"https://api.github.com/users/stevendearborn/events{/privacy}","received_events_url":"https://api.github.com/users/stevendearborn/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-11-23T18:26:30Z","updated_at":"2015-11-23T20:57:01Z","closed_at":null,"body":"The specification sates that: \" ... \r\nLists the required security schemes to execute this operation. The object can have multiple security schemes declared in it which are all required (that is, there is a logical AND between the schemes).\r\n...\"\r\nI would like to specify that exactly one of multiple/any  OAuth 2.0 flows can be used to authenticate the user, but the spec states that these are AND-ed, for example API-key and OAuth Authorization Code flow.\r\nHow can I define a security scheme that includes: authorization code, implicit and password OAuth flows - all three are fine, just pick one?"},"comment":{"url":"https://api.github.com/repos/swagger-api/swagger-spec/issues/comments/159061895","html_url":"https://github.com/swagger-api/swagger-spec/issues/515#issuecomment-159061895","issue_url":"https://api.github.com/repos/swagger-api/swagger-spec/issues/515","id":159061895,"user":{"login":"stevendearborn","id":6518685,"avatar_url":"https://avatars.githubusercontent.com/u/6518685?v=3","gravatar_id":"","url":"https://api.github.com/users/stevendearborn","html_url":"https://github.com/stevendearborn","followers_url":"https://api.github.com/users/stevendearborn/followers","following_url":"https://api.github.com/users/stevendearborn/following{/other_user}","gists_url":"https://api.github.com/users/stevendearborn/gists{/gist_id}","starred_url":"https://api.github.com/users/stevendearborn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stevendearborn/subscriptions","organizations_url":"https://api.github.com/users/stevendearborn/orgs","repos_url":"https://api.github.com/users/stevendearborn/repos","events_url":"https://api.github.com/users/stevendearborn/events{/privacy}","received_events_url":"https://api.github.com/users/stevendearborn/received_events","type":"User","site_admin":false},"created_at":"2015-11-23T20:57:01Z","updated_at":"2015-11-23T20:57:01Z","body":"OK - so those were other errors - ignore that screen capture!"}}