Security definitions about tsoa

[lukeautry]

@andrii-z4i Thanks for the feedback - I think you're right, this is an important thing to support.

I actually need this for one of my own projects, so expect to see some updates in the near future.

[lukeautry]

@andrii-z4i Do you believe this issue is adequately handled by the new configuration method introduced in 1.0.0?

[andrii-z4i]

@lukeautry Could you please point me out to the commit which you referring to, talking about configuration method? I've checked latest commits and something more or less related to that is a) my changes regarding JWT token support and b) your changes around splitting configuration files and having there some kind of oauth support. If it is b then, to be honest, I didn't try it yet.
I noticed that swagger.json generated by version 1.0.0 has validation errors and they are related to tsoa_auth and api_key fields. Validation error example.

[egandro]

I love the idea of security attributes.

I suggest adding more levels of abstractions to that - e.g. applying stuff to the whole
controller and inherit it to methods. In asp.net there is

[Authorize]
public class AdminController : Controller
{
. . .
}
or even
[Authorize(Roles="Administrators")]
public class AdminController : Controller
{
. . .
}

Reference: https://msdn.microsoft.com/en-us/library/system.web.mvc.authorizeattribute(v=vs.118).aspx

[lukeautry]

@andrii-z4i @egandro There's now support for security/authentication decorators in 1.0.18. See the updated readme for documentation.