Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

OAuth2 security requirement for /oauth2/revoke uses null instead of an empty scope list

Open Beginner friendly
#235 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
1/5
Estimated time
Under an hour
Newbie friendliness
85/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
openapi
Domain
api, documentation

Research direction

Find the OpenAPI definition file for the Square Connect API, likely in the repository root or a spec/ directory. Locate the security requirement for the POST /oauth2/revoke endpoint. Change the 'oauth2' value from null to an empty array []. Validate the change by running any OpenAPI validation tool mentioned in the project, or check if the repository has a test or lint script for the specification.

Written by the indexing model from the issue text.

Description

The OpenAPI definition for POST /oauth2/revoke currently contains:

"security": [
  {
    "oauth2": null
  }
]

In an OpenAPI Security Requirement Object, the value must be an array of scope names. When no scopes are required, it should be an empty array:

"security": [
  {
    "oauth2": []
  }
]

Strict OpenAPI parsers reject the current document. Normalizing this value to [] makes the complete specification pass validation.

Dominant language
Mustache
Stars
76
Forks
36
Avg merge
3h 14m
Merged PRs (30d)
1

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from square/connect-api-specification

All issues in square/connect-api-specification

Similar issues

More Backend & API Design issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.