المصادقة ومخططات الأمن

from typing import Annotated
from fastapi import Depends, FastAPI, HTTPException
from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
from fastapi.testclient import TestClient
bearer = HTTPBearer(auto_error=False)
app = FastAPI()
@app.get("/parse-only")
def parse_only(value: Annotated[HTTPAuthorizationCredentials | None, Depends(bearer)]):
    if value is None:
        raise HTTPException(status_code=401, detail="Authentication required", headers={"WWW-Authenticate": "Bearer"})
    return {"scheme": value.scheme.lower(), "credential_received": bool(value.credentials)}
with TestClient(app) as client:
    print(client.get("/parse-only").status_code)
    print(client.get("/parse-only", headers={"Authorization": "Bearer public-synthetic-text"}).json())

401
{'scheme': 'bearer', 'credential_received': True}

يحَلل النص العام ولا يوثق؛ ويثبت الاستلام فقط دون هوية أوصلاحية.

from typing import Annotated
from fastapi import Depends, FastAPI, HTTPException
from fastapi.testclient import TestClient
def current_user():
    raise HTTPException(status_code=401, detail="No lab identity")
app = FastAPI()
@app.get("/me")
def me(user: Annotated[dict, Depends(current_user)]): return {"id": user["id"]}
with TestClient(app) as client:
    print(client.get("/me").status_code)
    app.dependency_overrides[current_user] = lambda: {"id": 7}
    try:
        print(client.get("/me").json())
    finally:
        app.dependency_overrides.clear()

401
{'id': 7}

تمنع التبعية الأصلية ويحقن الاختبار الهوية فقط؛ وليس مصادقة منشورة أوتحققا من كلمة ورمز.