Alan Crosswell

The way you add extra stuff that is not yet (or may never be) supported to your schema is by extending get_schema() and then filling in the extra stuff. I've...

I don't quite follow the URL part of your issue. Sounds like you should submit a PR. My point was just that the openapi code is a work in progress,...

Aha! Yes, that looks like a bug and that the url should go in the `servers` array where it belongs. I suggest that you change the title of the issue...

Authentication is top-level in the components.securitySchemes which itemizes which alternative schemes are available (e.g. basic auth, session auth, token auth, etc). What you describe is putting the authorization [security requirement...

> Okay, good. > > So I guess here's my question, does it make sense to _skip_ adding the security details when `authentication_classes == api_settings.DEFAULT_AUTHENTICATION_CLASSES`? (I.e. they've not been overridden?)...

@carltongibson I've incorporated your suggestions, cleaned up the tests and added new ones as well as documentation, and I've rebased. I look forward to your feedback. Cheers!

Oops this last rebase broke due to url vs. path. I should have run tox locally first. Fixing it now.

hmm, @carltongibson your review comment seems to have disappeared. Maybe github is being eventually consistent?

@tomchristie I don't mean to be annoying but am wondering what the likelihood is of this PR being accepted. I see this milestone is due in a few days.

> Okay, just got through to this one in my notifications. As it happens I've just rolled a point release. Because. > But I'm okay with working through the 3.13...