René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Incorrect default value for OpenApiSecurityScheme.In when using \"http\" type with \"bearer\" scheme","articleBody":"**Describe the bug**\r\nWhen defining an OpenApiSecurityScheme of type http with the scheme bearer, the default value for In is set to Query instead of Header. According to the OpenAPI Specification, header should be the implied default when the type is http and the scheme is bearer.\r\n\r\n**OpenApi File To Reproduce**\r\n```yaml\r\nopenapi: 3.0.0\r\ninfo:\r\n  title: Minimal API\r\n  version: 1.0.0\r\npaths:\r\n  /example:\r\n    get:\r\n      summary: Example endpoint\r\n      security:\r\n        - Bearer: []\r\n      responses:\r\n        '200':\r\n          description: Successful response\r\ncomponents:\r\n  securitySchemes:\r\n    Bearer:\r\n      type: http\r\n      scheme: bearer\r\n ```\r\n\r\n**Expected behavior**\r\nThe default value for OpenApiSecurityScheme.In should be Header when the type is http and the scheme is bearer, aligning with the OpenAPI Specification’s default behavior.\r\n\r\n**Additional context**\r\nThis issue causes incorrect behavior when generating clients or code based on the OpenAPI definition, as the security token is expected to be sent as a query parameter instead of the Authorization header.\r\n","author":{"url":"https://github.com/HavenDV","@type":"Person","name":"HavenDV"},"datePublished":"2024-09-30T00:33:50.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/1843/OpenAPI.NET/issues/1843"}