FilesExpand file tree

master

/

test_security_api_key_header.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

68 lines (51 loc) · 1.78 KB

master

/

test_security_api_key_header.py

Copy path

Top

File metadata and controls

• Code
• Blame

68 lines (51 loc) · 1.78 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

from fastapi import Depends, FastAPI, Security

from fastapi.security import APIKeyHeader

from fastapi.testclient import TestClient

from pydantic import BaseModel

app = FastAPI()

api_key = APIKeyHeader(name="key")

class User(BaseModel):

username: str

def get_current_user(oauth_header: str = Security(api_key)):

user = User(username=oauth_header)

return user

@app.get("/users/me")

def read_current_user(current_user: User = Depends(get_current_user)):

return current_user

client = TestClient(app)

openapi_schema = {

"openapi": "3.0.2",

"info": {"title": "FastAPI", "version": "0.1.0"},

"paths": {

"/users/me": {

"get": {

"responses": {

"200": {

"description": "Successful Response",

"content": {"application/json": {"schema": {}}},

}

},

"summary": "Read Current User",

"operationId": "read_current_user_users_me_get",

"security": [{"APIKeyHeader": []}],

}

}

},

"components": {

"securitySchemes": {

"APIKeyHeader": {"type": "apiKey", "name": "key", "in": "header"}

}

},

}

def test_openapi_schema():

response = client.get("/openapi.json")

assert response.status_code == 200, response.text

assert response.json() == openapi_schema

def test_security_api_key():

response = client.get("/users/me", headers={"key": "secret"})

assert response.status_code == 200, response.text

assert response.json() == {"username": "secret"}

def test_security_api_key_no_key():

response = client.get("/users/me")

assert response.status_code == 403, response.text

assert response.json() == {"detail": "Not authenticated"}