Change Details

Wire the `SessionManager` into `ModuleSpecHandler`. Update the specification generator to build the global `components.securitySchemes` object and dynamically compute route-level security requirements based on whether an endpoint is read-only or performs a write. =Conditions of Acceptance= [ ] Registered the `SessionManager` service in `specs.v0.json` for `ModuleSpecHandler`. [ ] Updated the constructor of `ModuleSpecHandler.php` to inject `SessionManagerInterface`. [ ] Updated `getComponentsSpec()` to include `securitySchemes`. [ ] Implemented a private helper to map path-level security requirements and injected the results in `getRouteSpec()`. [ ] Expanded integration tests in `ModuleSpecHandlerTest.php` to verify correct structure of security outputs. =Depends on= {T427481} =References= - [[ https://docs.google.com/document/d/1fQvy_Y7AIW4H-aa3HbDVqJK0Yz9ONVZynLbLcjQNKN8/edit?tab=t.0 | Spike output document ]] written in {T423552}. - Parent task: {T422484}.

Wire the `SessionManager`, which {T427481} modified to communicate necessary OpenAPI information, into `ModuleSpecHandler`. Update the specification generator to build the global `components.securitySchemes` object and dynamically compute route-level security requirements based on whether an endpoint needs read/write access. =Conditions of Acceptance= [ ] Updated `ModuleSpecHandler::getComponentsSpec()` to include `securitySchemes`. Reference: https://docs.google.com/document/d/1fQvy_Y7AIW4H-aa3HbDVqJK0Yz9ONVZynLbLcjQNKN8/edit?tab=t.0#heading=h.lbqh3abg16ub [ ] Updated the constructor of `ModuleSpecHandler.php` to inject `SessionManagerInterface`. [ ] Registered the `SessionManager` service in `specs.v0.json` for `ModuleSpecHandler`. [ ] Updated any `ModuleSpecHandler` tests that need a mocked or real `SessionManagerInterface` to be passed. [ ] Updated `ModuleSpecHandler::getRouteSpec()` to inject a `security` array with the correct information into every OpenAPI operation object, for every path. References: https://docs.google.com/document/d/1fQvy_Y7AIW4H-aa3HbDVqJK0Yz9ONVZynLbLcjQNKN8/edit?tab=t.0#heading=h.r81lxihffxjg , https://docs.google.com/document/d/1fQvy_Y7AIW4H-aa3HbDVqJK0Yz9ONVZynLbLcjQNKN8/edit?tab=t.0#heading=h.6vbsm3r55frn [ ] Expanded integration tests in `ModuleSpecHandlerTest.php` to verify correct structure of security outputs. =References= - Parent task: {T422484}. - To do after {T427481}.

Wire the `SessionManager`, which {T427481} modified to communicate necessary OpenAPI information, into `ModuleSpecHandler`. Update the specification generator to build the global `components.securitySchemes` object and dynamically compute route-level security requirements based on whether an endpoint ineeds read-only or performs a write/write access. =Conditions of Acceptance= [ ] Registered the `SessionManager` service in `specs.v0.json` for `ModuleSpecHandler`. Updated `ModuleSpecHandler::getComponentsSpec()` to include `securitySchemes`. Reference: https://docs.google.com/document/d/1fQvy_Y7AIW4H-aa3HbDVqJK0Yz9ONVZynLbLcjQNKN8/edit?tab=t.0#heading=h.lbqh3abg16ub [ ] Updated the constructor of `ModuleSpecHandler.php` to inject `SessionManagerInterface`. [ ] Registered the `SessionManager` service in `specs.v0.json` for `ModuleSpecHandler`. [ ] Updated `getComponentsSpec()` to include `securitySchemes`. [ ] Implemented a private helper to map path-level security requirements and injected the results in `getRouteSpec()`. [ ] Expanded integration tests in `ModuleSpecHandlerTest.php` to verify correct structure of security outputs. =Depends on=any `ModuleSpecHandler` tests that need a mocked or real `SessionManagerInterface` to be passed. [ ] Updated `ModuleSpecHandler::getRouteSpec()` to inject a `security` array with the correct information into every OpenAPI operation object, for every path. References: https://docs.google.com/document/d/1fQvy_Y7AIW4H-aa3HbDVqJK0Yz9ONVZynLbLcjQNKN8/edit?tab=t.0#heading=h.r81lxihffxjg , https://docs.google.com/document/d/1fQvy_Y7AIW4H-aa3HbDVqJK0Yz9ONVZynLbLcjQNKN8/edit?tab=t.0#heading=h.6vbsm3r55frn {T427481}[ ] Expanded integration tests in `ModuleSpecHandlerTest.php` to verify correct structure of security outputs. =References= - [[ https://docs.google.com/document/d/1fQvy_Y7AIW4H-aa3HbDVqJK0Yz9ONVZynLbLcjQNKN8/edit?tab=t.0 | Spike output document ]] written in {T423552Parent task: {T422484}. - Parent task:- To do after {T422484}7481}.