fix(oauth2): avoid processing authorizationUrl when it is not a string

[glowcloud]

This PR avoids treating authorizationUrl as a string when it is not a string, e.g. when it is not defined:

openapi: 3.0.4
components:
  securitySchemes:
    oAuthSample: 
      type: oauth2
      flows:
        implicit:
          # authorizationUrl: https://example.com/oauth/authorize  
          scopes:
            read_pets: read your pets
            write_pets: modify pets in your account
paths:
  /pets:
    patch:
      summary: Add a new pet
      security:
        - oAuthSample:
          - write_pets
          - read_pets

[char0n]

Suggested change

	typeof authorizationUrl === "string" && authorizationUrl.indexOf("?") === -1
	typeof authorizationUrl === "string" && !authorizationUrl.includes("?")

[char0n]

Approved with one suggestion