assertTrue(isFoobar.apply("Foxyzoabcbar"));
    assertFalse(isFoobar.apply("Foobarx"));
  }

  @GwtIncompatible // Predicates.containsPattern
  public void testContains_apply() {
    Predicate<CharSequence> isFoobar = Predicates.contains(Pattern.compile("^Fo.*o.*bar$"));

    assertTrue(isFoobar.apply("Foxyzoabcbar"));
    assertFalse(isFoobar.apply("Foobarx"));
  }

  @J2ktIncompatible

    assertThat(Ascii.truncate("foobar", 10, "...")).isEqualTo("foobar");
    assertThat(Ascii.truncate("foobar", 5, "...")).isEqualTo("fo...");
    assertThat(Ascii.truncate("foobar", 6, "...")).isEqualTo("foobar");
    assertThat(Ascii.truncate("foobar", 3, "...")).isEqualTo("...");
    assertThat(Ascii.truncate("foobar", 10, "…")).isEqualTo("foobar");
    assertThat(Ascii.truncate("foobar", 4, "…")).isEqualTo("foo…");

    assertThat(Ascii.truncate("foobar", 10, "...")).isEqualTo("foobar");
    assertThat(Ascii.truncate("foobar", 5, "...")).isEqualTo("fo...");
    assertThat(Ascii.truncate("foobar", 6, "...")).isEqualTo("foobar");
    assertThat(Ascii.truncate("foobar", 3, "...")).isEqualTo("...");
    assertThat(Ascii.truncate("foobar", 10, "…")).isEqualTo("foobar");
    assertThat(Ascii.truncate("foobar", 4, "…")).isEqualTo("foo…");

client = TestClient(app)


def test_security_http_base():
    response = client.get("/users/me", headers={"Authorization": "Other foobar"})
    assert response.status_code == 200, response.text
    assert response.json() == {"scheme": "Other", "credentials": "foobar"}


def test_security_http_base_no_credentials():
    response = client.get("/users/me")
    assert response.status_code == 200, response.text

client = TestClient(app)


def test_security_http_digest():
    response = client.get("/users/me", headers={"Authorization": "Digest foobar"})
    assert response.status_code == 200, response.text
    assert response.json() == {"scheme": "Digest", "credentials": "foobar"}


def test_security_http_digest_no_credentials():
    response = client.get("/users/me")
    assert response.status_code == 200, response.text

client = TestClient(app)


def test_security_http_bearer():
    response = client.get("/users/me", headers={"Authorization": "Bearer foobar"})
    assert response.status_code == 200, response.text
    assert response.json() == {"scheme": "Bearer", "credentials": "foobar"}


def test_security_http_bearer_no_credentials():
    response = client.get("/users/me")
    assert response.status_code == 200, response.text

    assertChecksum(CRC_32, "");
    assertChecksum(CRC_32, "Z");
    assertChecksum(CRC_32, "foobar");
  }

  public void testAdler32_equalsChecksumValue() throws Exception {
    assertChecksum(ADLER_32, "");
    assertChecksum(ADLER_32, "Z");
    assertChecksum(ADLER_32, "foobar");
  }

  public void testCrc32_knownValues() throws Exception {
    assertHash32(0x1C8600E3, CRC_32, "hell");

    assertChecksum(CRC_32, "");
    assertChecksum(CRC_32, "Z");
    assertChecksum(CRC_32, "foobar");
  }

  public void testAdler32_equalsChecksumValue() throws Exception {
    assertChecksum(ADLER_32, "");
    assertChecksum(ADLER_32, "Z");
    assertChecksum(ADLER_32, "foobar");
  }

  public void testCrc32_knownValues() throws Exception {
    assertHash32(0x1C8600E3, CRC_32, "hell");

    * So, to authenticate with our API, it sends a header `Authorization` with a value of `Bearer ` plus the token.
    * If the token contains `foobar`, the content of the `Authorization` header would be: `Bearer foobar`.

## **FastAPI**'s `OAuth2PasswordBearer` { #fastapis-oauth2passwordbearer }

**FastAPI** provides several tools, at different levels of abstraction, to implement these security features.

    - Donc, pour s'authentifier auprès de notre API, il envoie un en-tête `Authorization` avec une valeur `Bearer ` suivie du token.
    - Si le token contient `foobar`, le contenu de l'en-tête `Authorization` serait : `Bearer foobar`.

## Le `OAuth2PasswordBearer` de **FastAPI** { #fastapis-oauth2passwordbearer }