OpenAPI server: request bodies are not validated against the declared schema

OpenAPI server: basic authentication of a technical user accepts an empty password when the configured password is empty (e.g. unset environment variable)