====test====
Access to a resource is denied when *X-API-Key* required header is not provided.
====spec====
{
  "info": {
    "name": "Test"
  },
  "auth": {
    "type": "apikey",
    "apikey": [
      {
        "key": "in",
        "value": "header",
        "type": "string"
      },
      {
        "key": "key",
        "value": "X-API-Key",
        "type": "string"
      }
    ]
  },
  "item": [
    {
      "id": "3b4f5a70-2a8f-46ba-a04b-a6f80621ad3f",
      "request": {
        "url": {
          "path": ["todos"]
        },
        "method": "GET"
      },
      "response": [
        {
          "code": 200,
          "description": "OK",
          "header": [
            {
              "key": "Content-Type",
              "value": "application/json"
            }
          ],
          "body": "\"test\""
        }
      ]
    }
  ]
}
====server====
mock -p 4010 ${document}
====command====
curl -i http://localhost:4010/todos
====expect====
HTTP/1.1 401 Unauthorized

{"type":"https://stoplight.io/prism/errors#UNAUTHORIZED","title":"Invalid security scheme used","status":401,"detail":"Your request does not fullfil the security requirements and no HTTP unauthorized response was found in the spec, so Prism is generating this error for you."}