Task: throw error on implicit flow

src/Kiota.Builder/Plugins/PluginsGenerationService.cs

@@ -79,7 +79,7 @@
                     pluginDocument.Write(writer);
                     break;
                 case PluginType.APIManifest:
                     var apiManifest = new ApiManifestDocument("application"); //TODO add application name
                     // pass empty config hash so that its not included in this manifest.
                     apiManifest.ApiDependencies[Configuration.ClientClassName] = Configuration.ToApiDependency(string.Empty, TreeNode?.GetRequestInfo().ToDictionary(static x => x.Key, static x => x.Value) ?? [], WorkingDirectory);
                     var publisherName = string.IsNullOrEmpty(OAIDocument.Info?.Contact?.Name)
@@ -137,7 +137,7 @@
             }
             return newSchema;
         }
         static OpenApiSchema? MergeAllOfInSchema(OpenApiSchema? schema)
         {
             if (schema?.AllOf is not { Count: > 0 }) return schema;
             var newSchema = new OpenApiSchema();
@@ -414,12 +414,13 @@
             {
                 ReferenceId = $"{{{name}_REGISTRATION_ID}}"
             },
-            SecuritySchemeType.OAuth2 => new OAuthPluginVault
+            // Only AuthorizationCode flow is supported
+            SecuritySchemeType.OAuth2 when securityScheme.Flows?.AuthorizationCode != null => new OAuthPluginVault
             {
                 ReferenceId = $"{{{name}_CONFIGURATION_ID}}"
             },
             _ => throw new UnsupportedSecuritySchemeException(["Bearer Token", "Api Key", "OpenId Connect", "OAuth"],
-                $"Unsupported security scheme type '{securityScheme.Type}'.")
+                  $"Unsupported security scheme type '{securityScheme.Type}'.")
         };
     }
 

tests/Kiota.Builder.Tests/Plugins/PluginsGenerationServiceTests.cs

@@ -384,9 +384,9 @@ public static TheoryData<string, string, string, PluginAuthConfiguration, Action
                     Assert.Equal("{openIdConnect0_REGISTRATION_ID}", ((ApiKeyPluginVault)auth0!).ReferenceId);
                 }
             },
-            // oauth2
+            // oauth2: authorization code
             {
-                "{securitySchemes: {oauth2_0: {type: oauth2, flows: {}}}}",
+                "{securitySchemes: {oauth2_0: {type: oauth2, flows: {authorizationCode: {}}}}}",
                 string.Empty, "security: [oauth2_0: []]", null, resultingManifest =>
                 {
                     Assert.NotNull(resultingManifest.Document);
@@ -398,6 +398,7 @@ public static TheoryData<string, string, string, PluginAuthConfiguration, Action
                     Assert.Equal("{oauth2_0_CONFIGURATION_ID}", ((OAuthPluginVault)auth0!).ReferenceId);
                 }
             },
+
             // should be anonymous
             {
                 "{}", string.Empty, "security: [invalid: []]", null, resultingManifest =>
@@ -507,6 +508,17 @@ await Assert.ThrowsAsync<UnsupportedSecuritySchemeException>(async () =>
                     });
                 }
             },
+            // oauth2: Implicit flow
+            {
+                "{securitySchemes: {oauth2_0: {type: oauth2, flows: {implicit: {}}}}}",
+                string.Empty, "security: [oauth2_0: []]", null, async (action) =>
+                {
+                    await Assert.ThrowsAsync<Kiota.Builder.Plugins.UnsupportedSecuritySchemeException>(async () =>
+                    {
+                        await action();
+                    });
+                }
+            },
         };
     }