====test==== Adding a header of "Authorization: Basic <>" where TOKEN is NOT base64 encoded <>:<> combination for a request to an endpoint, that is secured by BasicAuth (one of the security definitions selected manually), results in denied access. ====spec==== { "info": { "name": "Test" }, "item": [ { "id": "3b4f5a70-2a8f-46ba-a04b-a6f80621ad3f", "request": { "url": { "path": ["todos"] }, "auth": { "type": "basic" }, "method": "GET" }, "response": [ { "code": 200, "description": "OK", "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "\"test\"" } ] } ] } ====server==== mock -p 4010 ${document} ====command==== curl -i http://localhost:4010/todos -H "Authorization: Basic abc123" ====expect==== HTTP/1.1 401 Unauthorized {"type":"https://stoplight.io/prism/errors#UNAUTHORIZED","title":"Invalid security scheme used","status":401,"detail":"Your request does not fullfil the security requirements and no HTTP unauthorized response was found in the spec, so Prism is generating this error for you."}