There are several instances of the “password” attribute (User’s password, Meeting password, etc). Each time, they have a property “minimum” which is set to 8. “minimum” in OAS2 is for numeric fields! This appears to be a mistake in the spec, and it should be “minLength”.
OAS2 defers to JSON Schema for the interpretation of these keywords, which identifies “minimum” under “Validation keywords for numeric instances (number and integer)” and not under validationo keywords for strings.
Thanks for considering this fix. (currently breaks some OAS2 code gen systems)