Users need Specmatic to be able to use the tokenUrl specified in the OpenAPI Specification to retrieve real tokens for contract tests, especially in production-like environments where mock security configurations are not an option.
We are trying to use specmatic to test against the API secured by oAuth2, clientCredentials flow, and it is running against the production like environment. Since the application is running in a production like environment, we don't have an option to set it up with the mock security configuration for the purpose of the Contract Testing. Questions : - can specmatic use the tokenUrl specified in the OAS to retrieve the real token for the contract tests ? - How to specify the configuration for the clientId and clientSecrets for the successful token retrival ?