Coverage for docs_src/security/tutorial003_an.py: 100%

1from typing import Union 7 ctx1abcdefg

2 

3from fastapi import Depends, FastAPI, HTTPException, status 7 ctx1abcdefg

4from fastapi.security import OAuth2PasswordBearer, OAuth2PasswordRequestForm 7 ctx1abcdefg

5from pydantic import BaseModel 7 ctx1abcdefg

6from typing_extensions import Annotated 7 ctx1abcdefg

7 

8fake_users_db = { 7 ctx1abcdefg

9 "johndoe": { 

10 "username": "johndoe", 

11 "full_name": "John Doe", 

12 "email": "johndoe@example.com", 

13 "hashed_password": "fakehashedsecret", 

14 "disabled": False, 

15 }, 

16 "alice": { 

17 "username": "alice", 

18 "full_name": "Alice Wonderson", 

19 "email": "alice@example.com", 

20 "hashed_password": "fakehashedsecret2", 

21 "disabled": True, 

22 }, 

23} 

24 

25app = FastAPI() 7 ctx1abcdefg

26 

27 

28def fake_hash_password(password: str): 7 ctx1abcdefg

29 return "fakehashed" + password 14 ctx1vwxyzABCDEFGHI

30 

31 

32oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token") 7 ctx1abcdefg

33 

34 

35class User(BaseModel): 7 ctx1abcdefg

36 username: str 7 ctx1abcdefg

37 email: Union[str, None] = None 7 ctx1abcdefg

38 full_name: Union[str, None] = None 7 ctx1abcdefg

39 disabled: Union[bool, None] = None 7 ctx1abcdefg

40 

41 

42class UserInDB(User): 7 ctx1abcdefg

43 hashed_password: str 7 ctx1abcdefg

44 

45 

46def get_user(db, username: str): 7 ctx1abcdefg

47 if username in db: 21 ctx1oJhpKiqLjrMksNltOmuPn

48 user_dict = db[username] 14 ctx1ohpiqjrksltmun

49 return UserInDB(**user_dict) 14 ctx1ohpiqjrksltmun

50 

51 

52def fake_decode_token(token): 7 ctx1abcdefg

53 # This doesn't provide any security at all 

54 # Check the next version 

55 user = get_user(fake_users_db, token) 21 ctx1oJhpKiqLjrMksNltOmuPn

56 return user 21 ctx1oJhpKiqLjrMksNltOmuPn

57 

58 

59async def get_current_user(token: Annotated[str, Depends(oauth2_scheme)]): 7 ctx1abcdefg

60 user = fake_decode_token(token) 21 ctx1oJhpKiqLjrMksNltOmuPn

61 if not user: 21 ctx1oJhpKiqLjrMksNltOmuPn

62 raise HTTPException( 7 ctx1JKLMNOP

63 status_code=status.HTTP_401_UNAUTHORIZED, 

64 detail="Not authenticated", 

65 headers={"WWW-Authenticate": "Bearer"}, 

66 ) 

67 return user 14 ctx1ohpiqjrksltmun

68 

69 

70async def get_current_active_user( 7 ctx1abcdefg

71 current_user: Annotated[User, Depends(get_current_user)], 

72): 

73 if current_user.disabled: 14 ctx1ohpiqjrksltmun

74 raise HTTPException(status_code=400, detail="Inactive user") 7 ctx1opqrstu

75 return current_user 7 ctx1hijklmn

76 

77 

78@app.post("/token") 7 ctx1abcdefg

79async def login(form_data: Annotated[OAuth2PasswordRequestForm, Depends()]): 7 ctx1abcdefg

80 user_dict = fake_users_db.get(form_data.username) 21 ctx1vwQxyRzASBCTDEUFGVHIW

81 if not user_dict: 21 ctx1vwQxyRzASBCTDEUFGVHIW

82 raise HTTPException(status_code=400, detail="Incorrect username or password") 7 ctx1QRSTUVW

83 user = UserInDB(**user_dict) 14 ctx1vwxyzABCDEFGHI

84 hashed_password = fake_hash_password(form_data.password) 14 ctx1vwxyzABCDEFGHI

85 if not hashed_password == user.hashed_password: 14 ctx1vwxyzABCDEFGHI

86 raise HTTPException(status_code=400, detail="Incorrect username or password") 7 ctx1wyACEGI

87 

88 return {"access_token": user.username, "token_type": "bearer"} 7 ctx1vxzBDFH

89 

90 

91@app.get("/users/me") 7 ctx1abcdefg

92async def read_users_me( 7 ctx1abcdefg

93 current_user: Annotated[User, Depends(get_current_active_user)], 

94): 

95 return current_user 7 ctx1hijklmn