OWASP API Security recommends defining schemas for all responses, even errors. The 401 describes what happens when a request is unauthorized, so it is important to define this for documentation and contract testing.
OWASP API8 2023 Define Error Responses 401
Message: Operation is missing a 401 error response.
