OpenAPI 提供定義多種安全性「方案」。

透過使用它們，你可以善用這些基於標準的工具，包括這些互動式文件系統。

OpenAPI 定義了下列安全性方案：

* `apiKey`：應用程式特定的金鑰，來源可以是：
    * 查詢參數。
    * 標頭（header）。
    * Cookie。
* `http`：標準的 HTTP 驗證系統，包括：
    * `bearer`：使用 `Authorization` 標頭，值為 `Bearer ` 加上一個 token。這是從 OAuth2 延伸而來。
    * HTTP Basic 驗證。
    * HTTP Digest 等。
* `oauth2`：所有 OAuth2 的安全性處理方式（稱為「flows」）。
    * 其中數個 flow 適合用來建立 OAuth 2.0 身分驗證提供者（如 Google、Facebook、X（Twitter）、GitHub 等）：

    assert response.json() == {
        "detail": [
            {
                "type": "greater_than",
                "loc": ["body", 0, "age"],
                "msg": "Input should be greater than 0",
                "input": -1.0,
                "ctx": {"gt": 0},
            }
        ]
    }


def test_put_incorrect_body_multiple():

      assertTrue(t.equals(t));

      for (int j = i + 1; j < valuesInExpectedOrder.size(); j++) {
        T greater = valuesInExpectedOrder.get(j);
        assertTrue(greater + ".compareTo(" + t + ')', greater.compareTo(t) > 0);
        assertFalse(greater.equals(t));
      }
    }
  }

  /**
   * Returns a collection that simulates concurrent modification by having its size method return

    @Override
    public String projectName() {
        return "reaper";
    }

    public void testCanLaunchReaper() {
        BuildResult result = getGradleRunner().withArguments(":launchReaper", "-S", "--info").build();
        assertTaskSuccessful(result, ":launchReaper");
        assertOutputContains(result.getOutput(), "Copying reaper.jar...");
    }

    - Але для того конкретного кінцевого пункту потрібна автентифікація.
    - Тож, щоб автентифікуватися в нашому API, він надсилає заголовок `Authorization` зі значенням `Bearer ` плюс токен.
    - Якщо токен містить `foobar`, вміст заголовка `Authorization` буде: `Bearer foobar`.

## `OAuth2PasswordBearer` у **FastAPI** { #fastapis-oauth2passwordbearer }

   *
   * @param value any value in the range of the {@code char} type
   * @return the {@code char} value that equals {@code value}
   * @throws IllegalArgumentException if {@code value} is greater than {@link Character#MAX_VALUE}
   *     or less than {@link Character#MIN_VALUE}
   */
  public static char checkedCast(long value) {
    char result = (char) value;

   *
   * @param value any value in the range of the {@code short} type
   * @return the {@code short} value that equals {@code value}
   * @throws IllegalArgumentException if {@code value} is greater than {@link Short#MAX_VALUE} or
   *     less than {@link Short#MIN_VALUE}
   */
  public static short checkedCast(long value) {
    short result = (short) value;
    checkArgument(result == value, "Out of range: %s", value);

        }

        @ParameterizedTest
        @ValueSource(ints = { 0x0202, 0x0210, 0x0300, 0x0302, 0x0311 })
        @DisplayName("All specific dialects should be greater than or equal to SMB 2.0.2")
        void testDialectVersionProgression(int dialect) {
            assertTrue(dialect >= Smb2Constants.SMB2_DIALECT_0202,

            headers={"WWW-Authenticate": "Bearer"},
        )
    access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
    access_token = create_access_token(
        data={"sub": user.username}, expires_delta=access_token_expires
    )
    return Token(access_token=access_token, token_type="bearer")


@app.get("/users/me/")
async def read_users_me(

    }

    /**
     * Tests the constructor with a byte array that is larger than the minimal buffer size.
     */
    @Test
    void testConstructorWithDataMuchLarger() {
        // A byte array with a length greater than 32 should also be considered too large.
        byte[] veryLargeData = new byte[100];
        PACDecodingException exception = assertThrows(PACDecodingException.class, () -> new PacCredentialType(veryLargeData));