Coverage for docs_src / security / tutorial007_an_py310.py: 100%

1import secrets 3 ctx1abc

2from typing import Annotated 3 ctx1abc

3 

4from fastapi import Depends, FastAPI, HTTPException, status 3 ctx1abc

5from fastapi.security import HTTPBasic, HTTPBasicCredentials 3 ctx1abc

6 

7app = FastAPI() 3 ctx1abc

8 

9security = HTTPBasic() 3 ctx1abc

10 

11 

12def get_current_username( 3 ctx1abc

13 credentials: Annotated[HTTPBasicCredentials, Depends(security)], 

14): 

15 current_username_bytes = credentials.username.encode("utf8") 9 ctx1dgheijfkl

16 correct_username_bytes = b"stanleyjobson" 9 ctx1dgheijfkl

17 is_correct_username = secrets.compare_digest( 9 ctx1dgheijfkl

18 current_username_bytes, correct_username_bytes 

19 ) 

20 current_password_bytes = credentials.password.encode("utf8") 9 ctx1dgheijfkl

21 correct_password_bytes = b"swordfish" 9 ctx1dgheijfkl

22 is_correct_password = secrets.compare_digest( 9 ctx1dgheijfkl

23 current_password_bytes, correct_password_bytes 

24 ) 

25 if not (is_correct_username and is_correct_password): 9 ctx1dgheijfkl

26 raise HTTPException( 6 ctx1ghijkl

27 status_code=status.HTTP_401_UNAUTHORIZED, 

28 detail="Incorrect username or password", 

29 headers={"WWW-Authenticate": "Basic"}, 

30 ) 

31 return credentials.username 3 ctx1def

32 

33 

34@app.get("/users/me") 3 ctx1abc

35def read_current_user(username: Annotated[str, Depends(get_current_username)]): 3 ctx1abc

36 return {"username": username} 3 ctx1def