default-scope-exists-in-scopes-list
Overview
This rule belongs to the apimatic-preliminary-validation ruleset and states that:
x-default-scopes should only include scopes that are explicitly defined in the OAuth scopes list. This ensures consistency and prevents unauthorized or undefined access levels.
| Property | Value |
|---|---|
| Enabled | Yes |
| Maximum Severity | Error |
| Message | The scope listed in x-default-scopes isn't defined in the OAuth scopes list. |
| Code | APIMATICPRE_V075 |
| Type | Validation |
| Rule System | Semantic |
| Broad Category | Authentication |
| Products Impacted | Code Generation, Developer Experience Portal, API Transformer |
| Tags | preliminary checks validation apimatic authentication scopes default scopes |
Suggested Fixes
- Ensure all values specified in
x-default-scopesare also present in the OAuth scopes list. - Scope names are case-sensitive, so verify exact casing matches.