mc cat myminio-newuser/my-bucketname/my-objectname
```

### Policy Variables

You can use policy variables in the *Resource* element and in string comparisons in the *Condition* element.

To do this, use `yield` instead of `return`, and write the extra steps (code) after.

/// tip

Make sure to use `yield` one single time per dependency.

///

/// note | Technical Details

Any function that is valid to use with:

# or more contributor license agreements. Licensed under the Elastic License
# 2.0 and the Server Side Public License, v 1; you may not use this file except
# in compliance with, at your election, the Elastic License 2.0 or the Server
# Side Public License, v 1.

com.carrotsearch.randomizedtesting.RandomizedTest#globalTempDir() @ Use newTempDirPath() instead
com.carrotsearch.randomizedtesting.annotations.Seed @ Don't commit hardcoded seeds

    private static final String AES = "AES";

    /**
     * The algorithm to use for the cipher.
     * Default is Blowfish for backward compatibility.
     */
    protected String algorithm = BLOWFISH;

    /**
     * The transformation to use for the cipher when using Key objects.
     * Default is Blowfish to match the algorithm default.
     * <p>

{* ../../docs_src/security/tutorial002_an_py310.py hl[5,12:6] *}

## Créer une dépendance `get_current_user` { #create-a-get-current-user-dependency }

Créons une dépendance `get_current_user`.

Rappelez-vous que les dépendances peuvent avoir des sous-dépendances ?

`get_current_user` aura une dépendance avec le même `oauth2_scheme` que nous avons créé précédemment.

Si ces termes ne vous intéressent pas et que vous avez simplement besoin d'ajouter une sécurité avec une authentification basée sur un nom d'utilisateur et un mot de passe immédiatement, passez aux chapitres suivants.

## OAuth2 { #oauth2 }

OAuth2 est une spécification qui définit plusieurs façons de gérer l'authentification et l'autorisation.

C'est une spécification assez vaste qui couvre plusieurs cas d'utilisation complexes.

    /**
     * Reads the metadata from the specified file.
     *
     * @param input The file to deserialize the metadata from, must not be {@code null}.
     * @param options The options to use for deserialization, may be {@code null} to use the default values.
     * @return The deserialized metadata, never {@code null}.
     * @throws IOException If the metadata could not be deserialized.

 * or method references instead of classes, leaving your code easier to migrate in the future.
 *
 * <p>To use a reference of this type (say, named {@code guavaPredicate}) in a context where {@code
 * java.util.function.Predicate} is expected, use the method reference {@code
 * guavaPredicate::apply}. For the other direction, use {@code javaUtilPredicate::test}. A future

     *
     * @param session the session to use, must not be {@code null}
     * @param artifactCoordinates the artifact coordinates whose version range should be resolved, must not be {@code null}
     * @param repositories the repositories to use, or {@code null} to use the session's repositories
     * @param nature the nature of repositories to query when resolving the version range, or {@code null} to use the default

    call1.execute().use { response ->
      val source = response.body.source()
      assertThat(response.header("h1")).isEqualTo("v1")
      assertThat(source.readUtf8()).isEqualTo("Hello")
      assertThat(response.trailers()).isEqualTo(headersOf("t1", "v2"))
    }

    val call2 = client.newCall(Request(server.url("/")))
    call2.execute().use { response ->
      val source = response.body.source()