Coverage for docs_src / security / tutorial007_an_py310.py: 100%

1import secrets 9 ctx1abcdefghi

2from typing import Annotated 9 ctx1abcdefghi

3 

4from fastapi import Depends, FastAPI, HTTPException, status 9 ctx1abcdefghi

5from fastapi.security import HTTPBasic, HTTPBasicCredentials 9 ctx1abcdefghi

6 

7app = FastAPI() 9 ctx1abcdefghi

8 

9security = HTTPBasic() 9 ctx1abcdefghi

10 

11 

12def get_current_username( 9 ctx1abcdefghi

13 credentials: Annotated[HTTPBasicCredentials, Depends(security)], 

14): 

15 current_username_bytes = credentials.username.encode("utf8") 10 ctx1jnoklpqmrs

16 correct_username_bytes = b"stanleyjobson" 10 ctx1jnoklpqmrs

17 is_correct_username = secrets.compare_digest( 10 ctx1jnoklpqmrs

18 current_username_bytes, correct_username_bytes 

19 ) 

20 current_password_bytes = credentials.password.encode("utf8") 10 ctx1jnoklpqmrs

21 correct_password_bytes = b"swordfish" 10 ctx1jnoklpqmrs

22 is_correct_password = secrets.compare_digest( 10 ctx1jnoklpqmrs

23 current_password_bytes, correct_password_bytes 

24 ) 

25 if not (is_correct_username and is_correct_password): 10 ctx1jnoklpqmrs

26 raise HTTPException( 7 ctx1notpqrs

27 status_code=status.HTTP_401_UNAUTHORIZED, 

28 detail="Incorrect username or password", 

29 headers={"WWW-Authenticate": "Basic"}, 

30 ) 

31 return credentials.username 4 ctx1jklm

32 

33 

34@app.get("/users/me") 9 ctx1abcdefghi

35def read_current_user(username: Annotated[str, Depends(get_current_username)]): 9 ctx1abcdefghi

36 return {"username": username} 4 ctx1jklm