Harden protected route authentication

backend/scripts/generate-openapi.ts

@@ -21,6 +21,15 @@ async function generate(): Promise<void> {
       .setTitle('Velody API')
       .setDescription('Velody Phase 1 foundation API')
       .setVersion('1.0.0')
+      .addBearerAuth(
+        {
+          type: 'http',
+          scheme: 'bearer',
+          bearerFormat: 'Bearer',
+          description: 'Device access token',
+        },
+        'bearer',
+      )
       .build(),
   );