title: Mixing multiple authentication model for same API is a best practice?
body: <p>Sample API:</p>
  
  <pre><code>/product/list
  /product/save
  /product/update
  /product/delete
  </code></pre>
  
  <p>Assume that <code>/product</code> is the base path that has a filter to verify the authentication before serving the requests.</p>
  
  <p>At present, the OAuth authentication is implemented so all the requests are served after validating the access token. We got use case of serving one only context i.e <code>/product/list</code> in both OAuth authentication mode and <strong>BASIC</strong> authentication mode. But seems like mixing the multiple authentications for the same context is not a correct approach so expecting what is the best practice to be followed in this kind of cases</p>