What is the best way to handle optional authentication? (Resources that may or may not be protected)

[NexRX]

Hi again,

I have a resources that is optionally protected, think a blog post that a user can make private by setting a password.

If the resource is protected, great, we can demand a API key and use that as a password.
If the resource isn't protected, unforunately, we already specified a SecuritySchema that requires a password on the same endpoint.

In this scenario, what is the best way to either have a optional SecuritySchema or another way of letting request ommit it when its not required?

[sunli829]

I'm working on this 🙂

[sunli829]

Released in poem-openapi v3.0.3

poem/poem-openapi/tests/security_scheme.rs

Line 589 in cc5d458

async fn fallback() {

[NexRX]

Wow that is awesome, signs of a mature web-framework for sure! 😍 Thanks sunli!