Ensure schema.security is always an array (#3472)

Co-authored-by: Nicolas Dorseuil <[email protected]>

Author: conico974

packages/react-openapi/src/resolveOpenAPIOperation.ts

@@ -40,8 +40,12 @@ export async function resolveOpenAPIOperation(
     }
 
     const servers = 'servers' in schema ? (schema.servers ?? []) : [];
-    const security: OpenAPIV3_1.SecurityRequirementObject[] =
-        operation.security ?? schema.security ?? [];
+    const schemaSecurity = Array.isArray(schema.security)
+        ? schema.security
+        : schema.security
+          ? [schema.security]
+          : [];
+    const security: OpenAPIV3_1.SecurityRequirementObject[] = operation.security ?? schemaSecurity;
 
     // If security includes an empty object, it means that the security is optional
     const isOptionalSecurity = security.some((entry) => Object.keys(entry).length === 0);