====test====
Adding a header of "Authorization: Basic <<TOKEN>>" where TOKEN is NOT base64 encoded <<ID>>:<<PASS>> combination
for a request to an endpoint, which security depends on global security definitions, results in denied access.
====spec====
swagger: '2.0'
paths:
  /todos:
    get:
      responses:
        200:
          description: OK
          examples:
            application/json: test
securityDefinitions:
  BasicAuth:
    type: basic
  ApiKeyAuth:
    type: apiKey
    in: header
    name: X-API-Key
security:
  - BasicAuth: []
  - ApiKeyAuth: []
====server====
mock -p 4010 ${document}
====command====
curl -i http://localhost:4010/todos -H "Authorization: Basic abc123"
====expect====
HTTP/1.1 401 Unauthorized

{"type":"https://stoplight.io/prism/errors#UNAUTHORIZED","title":"Invalid security scheme used","status":401,"detail":"Your request does not fullfil the security requirements and no HTTP unauthorized response was found in the spec, so Prism is generating this error for you."}