Security GET parameters are rejected by strict validation

[underyx]

Description

If I have the following definition, connexion will reject all /ping requests with Extra query parameter(s) api_key not in spec.

securityDefinitions:
  ApiKeyAuth:
    type: apiKey
    in: query
    name: api_key
paths:
  /ping:
    security:
      - ApiKeyAuth: []
    get:
      summary: Return a simple JSON payload for health check purposes
      responses:
        # …

Expected behaviour

connexion should know that api_key is also a supported parameter name.

Actual behaviour

connexion thinks api_key has no place to be there

Steps to reproduce

1. Launch an app with the above Swagger file
2. Send a request to /ping?api_key=1

Additional info:

Output of the commands:

• python --version: Python 2.7.13
• pip show connexion | grep "^Version\:": Version: 1.1.9