securityDefinitions:
  appKeyA:
    type: apiKey
    name: Authorization
    in: header
  appKeyB:
    type: apiKey
    in: header
    name: X-APP-ID

/foo
security:
        - appKeyA: []
          appKeyB: []

app.use(
    middleware.swaggerSecurity({
      //manage token function in the 'auth' module
      appKeyA: auth.verifyToken

    })
  );

exports.verifyToken = function(req, authOrSecDef, token, callback) {
   ...
}