From aebe9a282cf38116ed2a3c9c443aa6275dfe9b1d Mon Sep 17 00:00:00 2001
From: dashevchenko <dshevchenko@thingsboard.io>
Date: Thu, 26 Feb 2026 10:57:58 +0200
Subject: [PATCH] fixed createSecurityRequirement (for http and apiKey schemes
 the list must be empty.)

---
 .../org/thingsboard/server/config/SwaggerConfiguration.java | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/application/src/main/java/org/thingsboard/server/config/SwaggerConfiguration.java b/application/src/main/java/org/thingsboard/server/config/SwaggerConfiguration.java
index 1eaca55f3c..db9a7953af 100644
--- a/application/src/main/java/org/thingsboard/server/config/SwaggerConfiguration.java
+++ b/application/src/main/java/org/thingsboard/server/config/SwaggerConfiguration.java
@@ -406,11 +406,7 @@ public class SwaggerConfiguration {
     }
 
     private SecurityRequirement createSecurityRequirement(String schemeName) {
-        return new SecurityRequirement().addList(schemeName, Arrays.asList(
-                Authority.SYS_ADMIN.name(),
-                Authority.TENANT_ADMIN.name(),
-                Authority.CUSTOMER_USER.name()
-        ));
+        return new SecurityRequirement().addList(schemeName, List.of());
     }
 
     private Tag extractTagFromPath(Map.Entry<String, PathItem> entry) {