No scopes unavailable in OAuth2 flow

[jpedrofontes]

Hello, If an application does not use the scopes property in an oauth2 security flow, the property should be present in the output openapi.yaml to not cause a parsing error in Swagger.

It should be represented as an empty object:

scopes: {}