As shown in https://petstore.swagger.io/, apis of the PET controller get authenticated by OAuth2, but that of the STORE co