fix: security scheme reference annoations parsing

Signed-off-by: Vincent Biret <[email protected]>

Author: baywet

src/Microsoft.OpenApi/Reader/V31/OpenApiSecuritySchemeDeserializer.cs

@@ -90,7 +90,9 @@ public static IOpenApiSecurityScheme LoadSecurityScheme(ParseNode node, OpenApiD
             if (pointer != null)
             {
                 var reference = GetReferenceIdAndExternalResource(pointer);
-                return new OpenApiSecuritySchemeReference(reference.Item1, hostDocument, reference.Item2);
+                var securitySchemeReference = new OpenApiSecuritySchemeReference(reference.Item1, hostDocument, reference.Item2);
+                securitySchemeReference.Reference.SetMetadataFromMapNode(mapNode);
+                return securitySchemeReference;
             }
 
             var securityScheme = new OpenApiSecurityScheme();

test/Microsoft.OpenApi.Readers.Tests/V31Tests/OpenApiSecuritySchemeReferenceDeserializerTests.cs

@@ -0,0 +1,41 @@
+using System.Text.Json.Nodes;
+using Microsoft.OpenApi.Reader;
+using Microsoft.OpenApi.Reader.V31;
+using Xunit;
+
+namespace Microsoft.OpenApi.Readers.Tests.V31Tests;
+
+public class OpenApiSecuritySchemeReferenceDeserializerTests
+{
+    [Fact]
+    public void ShouldDeserializeSecuritySchemeReferenceAnnotations()
+    {
+        var json =
+        """
+        {
+            "$ref": "#/components/securitySchemes/MyScheme",
+            "description": "This is a security scheme reference"
+        }
+        """;
+
+        var hostDocument = new OpenApiDocument();
+        hostDocument.AddComponent("MyScheme", new OpenApiSecurityScheme
+        {
+            Type = SecuritySchemeType.ApiKey,
+            Name = "api_key",
+            In = ParameterLocation.Header,
+            Description = "This is a security scheme description",
+        });
+        var jsonNode = JsonNode.Parse(json);
+        var parseNode = ParseNode.Create(new ParsingContext(new()), jsonNode);
+
+        var result = OpenApiV31Deserializer.LoadSecurityScheme(parseNode, hostDocument);
+
+        Assert.NotNull(result);
+        var resultReference = Assert.IsType<OpenApiSecuritySchemeReference>(result);
+
+        Assert.Equal("MyScheme", resultReference.Reference.Id);
+        Assert.Equal("This is a security scheme reference", resultReference.Description);
+        Assert.NotNull(resultReference.Target);
+    }
+}