From 319a1e536c4ddd34a5dc9330f06a8824869240e8 Mon Sep 17 00:00:00 2001
From: spastorelli <spastorelli@users.noreply.github.com>
Date: Fri, 26 Sep 2025 09:11:52 +0200
Subject: [PATCH] Ensure operation security reqs inherits from spec-level when
 not defined (#3690)

---
 .changeset/quick-donuts-double.md                     | 5 +++++
 packages/react-openapi/src/resolveOpenAPIOperation.ts | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)
 create mode 100644 .changeset/quick-donuts-double.md

diff --git a/.changeset/quick-donuts-double.md b/.changeset/quick-donuts-double.md
new file mode 100644
index 000000000..5c3bd4e53
--- /dev/null
+++ b/.changeset/quick-donuts-double.md
@@ -0,0 +1,5 @@
+---
+"@gitbook/react-openapi": patch
+---
+
+Ensure operation security requirements inherits from spec-level when not defined
diff --git a/packages/react-openapi/src/resolveOpenAPIOperation.ts b/packages/react-openapi/src/resolveOpenAPIOperation.ts
index c01fc939e..db99c7cb1 100644
--- a/packages/react-openapi/src/resolveOpenAPIOperation.ts
+++ b/packages/react-openapi/src/resolveOpenAPIOperation.ts
@@ -71,7 +71,7 @@ export async function resolveOpenAPIOperation(
 
     return {
         servers,
-        operation,
+        operation: { ...operation, security },
         method,
         path,
         securities,