====test====
Making a request (and not including any credentials) to an endpoint,
which security depends on the one and only global security scheme,
results in a 401 status code response.
====spec====
{
  "info": {
    "name": "Test"
  },
  "auth": {
    "type": "basic"
  },
  "item": [
    {
      "id": "3b4f5a70-2a8f-46ba-a04b-a6f80621ad3f",
      "request": {
        "url": {
          "path": ["todos"]
        },
        "method": "GET"
      },
      "response": [
        {
          "code": 200,
          "description": "OK",
          "header": [
            {
              "key": "Content-Type",
              "value": "application/json"
            }
          ],
          "body": "0"
        }
      ]
    }
  ]
}
====server====
mock -p 4010 ${document}
====command====
curl -i http://localhost:4010/todos
====expect====
HTTP/1.1 401 Unauthorized
www-authenticate: Basic realm="*"

{"type":"https://stoplight.io/prism/errors#UNAUTHORIZED","title":"Invalid security scheme used","status":401,"detail":"Your request does not fullfil the security requirements and no HTTP unauthorized response was found in the spec, so Prism is generating this error for you.","headers":{"WWW-Authenticate":"Basic realm=\"*\""}}