diff --git a/src/schemas/validation/schema.yaml b/src/schemas/validation/schema.yaml
index 947a4b004b..31a190023c 100644
--- a/src/schemas/validation/schema.yaml
+++ b/src/schemas/validation/schema.yaml
@@ -960,7 +960,7 @@ $defs:
           scopes:
             $ref: '#/$defs/map-of-strings'
         required:
-          - authorizationUrl
+          - deviceAuthorizationUrl
           - tokenUrl
           - scopes
         $ref: '#/$defs/specification-extensions'
diff --git a/tests/schema/pass/security-scheme-object-examples.yaml b/tests/schema/pass/security-scheme-object-examples.yaml
index 8db1abe25a..d3472d5a32 100644
--- a/tests/schema/pass/security-scheme-object-examples.yaml
+++ b/tests/schema/pass/security-scheme-object-examples.yaml
@@ -28,13 +28,8 @@ components:
       description: Cert must be signed by example.com CA
     OAuth2:
       type: oauth2
+      oauth2MetadataUrl: https://example.com/api/oauth/metadata
       flows:
-        implicit:
-          authorizationUrl: https://example.com/api/oauth/dialog
-          scopes:
-            write:pets: modify pets in your account
-            read:pets: read your pets
-          refreshUrl: https://example.com/api/oauth/refresh
         authorizationCode:
           authorizationUrl: https://example.com/api/oauth/dialog
           refreshUrl: https://example.com/api/oauth/refresh
@@ -52,6 +47,21 @@ components:
           scopes:
             read:pets: read your pets
           refreshUrl: https://example.com/api/oauth/refresh
+        deviceAuthorization:
+          deviceAuthorizationUrl: https://example.com/api/oauth/device
+          tokenUrl: https://example.com/api/oauth/token
+          scopes:
+            read:pets: read your pets
+          refreshUrl: https://example.com/api/oauth/refresh
+    OAuth2Old:
+      deprecated: true
+      type: oauth2
+      flows:
+        implicit:
+          authorizationUrl: https://example.com/api/oauth/dialog
+          scopes:
+            read:pets: read your pets
+          refreshUrl: https://example.com/api/oauth/refresh
     OpenIdConnect:
       type: openIdConnect
       openIdConnectUrl: https://example.com/api/oauth/openid