There is an ask for us to add a components/securitySchemes to the REST API openapi.json (this is stemming from a PR that was submitted to Kiota where components/securitySchemes along with various x- extensions that is needed by Kiota was added)
Based on the comment here: Wikidata:Report a technical problem#Wikidata REST API openapi.json should include components/securitySchemes