The OpenAPI Specification Repository
3.0.2 - Security Scheme Object description missing cookie location for apiKey