Fix implicit using

src/OpenAPI.WebApiGenerator/CodeGeneration/ApiConfigurationGenerator.cs

@@ -12,8 +12,11 @@ internal SourceCode GenerateClass() =>
         using System;
 
         namespace {{@namespace}};
-
-        public sealed class {{ClassName}} 
+
+        /// <summary>
+        /// Configuration for the generated web API.
+        /// </summary>
+        public sealed class {{ClassName}}
         {
             /// <summary>
             /// The uri to the exposed OpenAPI specification used to generate the API.

src/OpenAPI.WebApiGenerator/CodeGeneration/AuthGenerator.cs

@@ -31,8 +31,9 @@ public AuthGenerator(OpenApiDocument openApiDocument)
         {
             return null;
         }
-        return new SourceCode("SecuritySchemes.g.cs", 
+        return new SourceCode("SecuritySchemes.g.cs",
 $$"""
+using Microsoft.AspNetCore.Http;
 using System.Collections.Immutable;
 
 namespace {{@namespace}};
@@ -216,7 +217,12 @@ internal static class {{className}}
 #nullable enable
 using Microsoft.AspNetCore.Authentication;
 using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Http;
+using System;
+using System.Collections.Generic;
+using System.Linq;
 using System.Security.Claims;
+using System.Threading.Tasks;
 
 namespace {{@namespace}};
 
@@ -387,13 +393,15 @@ internal sealed class {{securityRequirementsFilterClassName}}(Operation operatio
     protected override SecurityRequirements Requirements { get; } = new()
     {{{string.Join(",", 
         securityRequirementGroups.Select(securityRequirementGroup =>
-            securityRequirementGroup.AggregateToString(securityRequirement => 
+            securityRequirementGroup.Any() ? securityRequirementGroup.AggregateToString(securityRequirement => 
 $$"""
         new SecurityRequirement
         {
             ["{{securityRequirement.Key}}"] = [{{string.Join(", ", securityRequirement.Value.Select(scope => $"\"{scope}\""))}}]
         }
-""")))}}
+""") : """
+       new SecurityRequirement()
+       """))}}
     };
 
     private static Request ResolveRequest(HttpContext context) => (Request) context.Items[RequestItemKey]!;
@@ -409,9 +417,11 @@ internal sealed class {{securityRequirementsFilterClassName}}(Operation operatio
         {
             return null;
         }
-        return new SourceCode("SecuritySchemeOptions.g.cs", 
+        return new SourceCode("SecuritySchemeOptions.g.cs",
 $$"""
 #nullable enable
+using System;
+
 namespace {{@namespace}};
 
 /// <summary>

src/OpenAPI.WebApiGenerator/CodeGeneration/HttpRequestExtensionsGenerator.cs

@@ -37,11 +37,17 @@ internal SourceCode GenerateHttpRequestExtensionsClass() =>
         new($"{HttpRequestExtensionsClassName}.g.cs",
         $$$""""
         #nullable enable
+        using System;
         using System.Collections.Concurrent;
+        using System.Collections.Generic;
         using System.Diagnostics.CodeAnalysis;
+        using System.Linq;
         using System.Text.Json;
+        using System.Threading;
+        using System.Threading.Tasks;
         using Corvus.Json;
         using Microsoft.AspNetCore.Http;
+        using Microsoft.AspNetCore.Routing;
         using Microsoft.Extensions.Primitives;
         using Microsoft.Net.Http.Headers;
         using OpenAPI.ParameterStyleParsers;

src/OpenAPI.WebApiGenerator/CodeGeneration/HttpResponseExtensionsGenerator.cs

@@ -21,7 +21,10 @@ internal SourceCode GenerateHttpResponseExtensionsClass() =>
         new($"{HttpResponseExtensionsClassName}.g.cs",
         $$$""""
         #nullable enable
+        using System;
         using System.Collections.Concurrent;
+        using System.Collections.Generic;
+        using System.Linq;
         using System.Text.Json;
         using System.Text.Json.Nodes;
         using Corvus.Json;

src/OpenAPI.WebApiGenerator/CodeGeneration/JsonValidationExceptionGenerator.cs

@@ -16,7 +16,9 @@ internal SourceCode GenerateJsonValidationExceptionClass() =>
         #nullable enable
         using Corvus.Json;
         using System;
+        using System.Collections.Generic;
         using System.Collections.Immutable;
+        using System.Linq;
         using System.Text;
 
         namespace {{@namespace}};

src/OpenAPI.WebApiGenerator/CodeGeneration/OperationGenerator.cs

@@ -31,9 +31,14 @@ internal SourceCode Generate(string @namespace,
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.Extensions.DependencyInjection;
+using System;
+using System.Collections.Generic;
 using System.Collections.Immutable;
+using System.Linq;
 using System.Security.Claims;
 using System.Threading;
+using System.Threading.Tasks;
 
 namespace {{@namespace}};
 {{ new[]
@@ -72,7 +77,7 @@ internal partial class Operation
     /// Create a request validation error response.
     /// <exception cref="JsonValidationException"></exception>
     /// <param name="request">The invalid request</param>
-    /// <param name="ValidationContext">The validation context describing the validation errors</param>
+    /// <param name="validationContext">The validation context describing the validation errors</param>
     /// </summary>
     private Response CreateRequestValidationErrorResponse(Request request, ValidationContext validationContext)
     {
@@ -272,6 +277,10 @@ private static Diagnostic CreateMissingHandlersDiagnosticMessage(string @namespa
 
     private static string GenerateMissingHandler(string @namespace) =>
         $$"""
+            using System;
+            using System.Threading;
+            using System.Threading.Tasks;
+
             namespace {{@namespace}}
             {
                 internal partial class Operation

src/OpenAPI.WebApiGenerator/CodeGeneration/OperationRouterGenerator.cs

@@ -12,11 +12,14 @@ internal SourceCode ForMinimalApi(List<(string Namespace, KeyValuePair<HttpMetho
 $$"""
 #nullable enable
 using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.Extensions.DependencyInjection;
 
 namespace {{@namespace}};
 
 /// <summary>
-///  Configure routes for OpenAPI operations  
+///  Configure routes for OpenAPI operations
 /// </summary>
 internal static class OperationRouter
 {

src/OpenAPI.WebApiGenerator/CodeGeneration/RequestGenerator.cs

@@ -31,6 +31,12 @@ internal SourceCode GenerateRequestClass(string @namespace, string path)
 $$"""
 #nullable enable
 using Corvus.Json;
+using Microsoft.AspNetCore.Http;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace {{@namespace}};
 

src/OpenAPI.WebApiGenerator/CodeGeneration/ResponseGenerator.cs

@@ -14,8 +14,13 @@ public SourceCode GenerateResponseClass(string @namespace, string path)
 $$"""
 #nullable enable
 using Corvus.Json;
+using Microsoft.AspNetCore.Http;
+using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Net.Http.Headers;
+using System;
+using System.Collections.Generic;
 using System.Diagnostics.CodeAnalysis;
+using System.Linq;
 using System.Text.Json;
 using {{httpResponseExtensionsGenerator.Namespace}};
 

src/OpenAPI.WebApiGenerator/CodeGeneration/SchemaGenerator.cs

@@ -152,6 +152,7 @@ private List<TypeDeclaration> GenerateCode(SourceGeneratorHelpers.TypesToGenerat
             optionalAsNullable: typesToGenerate.OptionalAsNullable,
             disabledNamingHeuristics: [.. typesToGenerate.DisabledNamingHeuristics],
             fileExtension: ".g.cs",
+            addExplicitUsings: true,
             defaultAccessibility: typesToGenerate.DefaultAccessibility);
 
         var languageProvider = CSharpLanguageProvider.DefaultWithOptions(options);

src/OpenAPI.WebApiGenerator/CodeGeneration/SequentialMediaTypesGenerator.cs

@@ -27,8 +27,12 @@ internal string GetFullyQualifiedTypeName(
 using Microsoft.AspNetCore.Authorization;
 using System;
 using System.Buffers;
+using System.Collections.Generic;
+using System.IO;
 using System.IO.Pipelines;
 using System.Text.Json;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace {{@namespace}};
 

src/OpenAPI.WebApiGenerator/CodeGeneration/ValidationExtensionsGenerator.cs

@@ -7,7 +7,10 @@ internal sealed class ValidationExtensionsGenerator(string @namespace)
 $$"""
 #nullable enable
 using Corvus.Json;
+using System;
+using System.Collections.Generic;
 using System.Collections.Immutable;
+using System.Linq;
 using System.Text.Json;
 
 namespace {{@namespace}};

tests/Example.OpenApi20/Example.OpenApi20.csproj

@@ -5,6 +5,7 @@
         <Nullable>enable</Nullable>
         <ImplicitUsings>enable</ImplicitUsings>
         <RootNamespace>Example.OpenApi20</RootNamespace>
+        <GenerateDocumentationFile>true</GenerateDocumentationFile>
 
         <ApiCompatValidateAssemblies>true</ApiCompatValidateAssemblies>
         <ApiCompatContractAssembly>LastMajorVersionBinary/$(AssemblyName).dll</ApiCompatContractAssembly>

tests/Example.OpenApi20/Program.cs

@@ -37,4 +37,7 @@
 app.MapOperations();
 app.Run();
 
+/// <summary>
+/// Application entry point.
+/// </summary>
 public abstract partial class Program;

tests/Example.OpenApi30/Example.OpenApi30.csproj

@@ -5,6 +5,7 @@
         <Nullable>enable</Nullable>
         <ImplicitUsings>enable</ImplicitUsings>
         <RootNamespace>Example.OpenApi30</RootNamespace>
+        <GenerateDocumentationFile>true</GenerateDocumentationFile>
 
         <ApiCompatValidateAssemblies>true</ApiCompatValidateAssemblies>
         <ApiCompatContractAssembly>LastMajorVersionBinary/$(AssemblyName).dll</ApiCompatContractAssembly>

tests/Example.OpenApi30/Program.cs

@@ -44,4 +44,7 @@
 app.MapOperations();
 app.Run();
 
+/// <summary>
+/// Application entry point.
+/// </summary>
 public abstract partial class Program;

tests/Example.OpenApi31/Example.OpenApi31.csproj

@@ -5,6 +5,7 @@
         <Nullable>enable</Nullable>
         <ImplicitUsings>enable</ImplicitUsings>
         <RootNamespace>Example.OpenApi31</RootNamespace>
+        <GenerateDocumentationFile>true</GenerateDocumentationFile>
 
         <ApiCompatValidateAssemblies>true</ApiCompatValidateAssemblies>
         <ApiCompatContractAssembly>LastMajorVersionBinary/$(AssemblyName).dll</ApiCompatContractAssembly>

tests/Example.OpenApi31/Program.cs

@@ -49,4 +49,7 @@
 app.MapOperations();
 app.Run();
 
+/// <summary>
+/// Application entry point.
+/// </summary>
 public abstract partial class Program;

tests/Example.OpenApi32/Example.OpenApi32.csproj

@@ -3,8 +3,8 @@
     <PropertyGroup>
         <TargetFramework>net9.0</TargetFramework>
         <Nullable>enable</Nullable>
-        <ImplicitUsings>enable</ImplicitUsings>
         <RootNamespace>Example.OpenApi32</RootNamespace>
+        <GenerateDocumentationFile>true</GenerateDocumentationFile>
 
         <ApiCompatValidateAssemblies>true</ApiCompatValidateAssemblies>
         <ApiCompatContractAssembly>LastMajorVersionBinary/$(AssemblyName).dll</ApiCompatContractAssembly>

tests/Example.OpenApi32/Paths/FooFooId/Delete/Operation.Handler.cs

@@ -1,3 +1,6 @@
+using System.Threading;
+using System.Threading.Tasks;
+
 namespace Example.OpenApi32.Paths.FooFooId.Delete;
 
 internal partial class Operation

tests/Example.OpenApi32/Paths/FooFooId/Put/Operation.Handler.cs

@@ -1,4 +1,8 @@
+using System;
 using System.Collections.Immutable;
+using System.Linq;
+using System.Threading;
+using System.Threading.Tasks;
 using Corvus.Json;
 
 namespace Example.OpenApi32.Paths.FooFooId.Put;

tests/Example.OpenApi32/Paths/FooFooIdEvents/Get/Operation.Handler.cs

@@ -1,3 +1,6 @@
+using System;
+using System.Threading;
+using System.Threading.Tasks;
 using Example.OpenApi32.Components.Schemas;
 
 namespace Example.OpenApi32.Paths.FooFooIdEvents.Get;

tests/Example.OpenApi32/Paths/FooFooIdEvents/Post/Operation.Handler.cs

@@ -1,4 +1,7 @@
-using Example.OpenApi32.Components.Schemas;
+using System;
+using System.Threading;
+using System.Threading.Tasks;
+using Example.OpenApi32.Components.Schemas;
 
 namespace Example.OpenApi32.Paths.FooFooIdEvents.Post;
 

tests/Example.OpenApi32/Program.cs

@@ -1,7 +1,11 @@
+using System;
 using Corvus.Json;
 using Example.OpenApi.Auth;
 using Example.OpenApi32;
 using Microsoft.AspNetCore.Authentication.Certificate;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
 using Microsoft.IdentityModel.Tokens;
 
 var builder = WebApplication.CreateBuilder(args);
@@ -49,4 +53,7 @@
 app.MapOperations();
 app.Run();
 
+/// <summary>
+/// Application entry point.
+/// </summary>
 public abstract partial class Program;

tests/Example.OpenApi32/openapi.json

@@ -73,7 +73,11 @@
           "200": {
             "description": "Successfully deleted"
           }
-        }
+        },
+        "security": [
+          {},
+          {"openIdConnect": []}
+        ]
       },
       "parameters": [
         {

tests/OpenAPI.WebApiGenerator.Tests/ApiGeneratorTests.SecurityRequirements.cs

@@ -0,0 +1,33 @@
+using System.IO;
+using System.Linq;
+using AwesomeAssertions;
+using Xunit;
+
+namespace OpenAPI.WebApiGenerator.Tests;
+
+public partial class ApiGeneratorTests
+{
+    [Theory]
+    [MemberData(nameof(AnonymousSecurityRequirementSpecs))]
+    public void GivenAnonymousSecurityRequirement_WhenGenerating_SecurityRequirementsFilterRepresentsEachRequirementObject(
+        string _, string openApiSpec)
+    {
+        var sourceCode = GetOperationSourceCode(openApiSpec);
+
+        sourceCode.Should().Contain("class SecurityRequirementsFilter");
+        sourceCode.Should().Contain("new SecurityRequirement", Exactly.Twice());
+        sourceCode.Should().Contain("[\"secret_key\"] = []", Exactly.Once());
+    }
+
+    private string GetOperationSourceCode(string openApiSpec)
+    {
+        var compilation = SetupGenerator(openApiSpec, out var diagnostics);
+        HasOnlyMissingHandler(diagnostics);
+
+        var operationSyntaxTree = compilation.SyntaxTrees
+            .FirstOrDefault(t => Path.GetFileName(t.FilePath).EndsWith("Operation.g.cs"));
+        operationSyntaxTree.Should().NotBeNull();
+
+        return operationSyntaxTree.ToString();
+    }
+}