<img src="/img/tutorial/security/image02.png">

/// note

It doesn't matter what you type in the form, it won't work yet. But we'll get there.

///

This is of course not the frontend for the final users, but it's a great automatic tool to document interactively all your API.

It can be used by the frontend team (that can also be yourself).

        uses: actions/checkout@v4
      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: 1.24.x
          cached: false
      - name: Get official govulncheck
        run: go install golang.org/x/vuln/cmd/govulncheck@latest
        shell: bash
      - name: Run govulncheck
        run: govulncheck -show verbose ./...

@app.post("/authors/{author_id}/items/", response_model=Author)  # (4)
async def create_author_items(author_id: str, items: list[Item]):  # (5)
    return {"name": author_id, "items": items}  # (6)


@app.get("/authors/", response_model=list[Author])  # (7)
def get_authors():  # (8)
    return [  # (9)
        {
            "name": "Breaters",
            "items": [
                {

	public fun equals (Ljava/lang/Object;)Z
	public final fun fragment ()Ljava/lang/String;
	public static final fun get (Ljava/lang/String;)Lokhttp3/HttpUrl;
	public static final fun get (Ljava/net/URI;)Lokhttp3/HttpUrl;
	public static final fun get (Ljava/net/URL;)Lokhttp3/HttpUrl;
	public fun hashCode ()I
	public final fun host ()Ljava/lang/String;
	public final fun isHttps ()Z

User: `johndoe`

Password: `secret`

<img src="/img/tutorial/security/image04.png">

システムで認証されると、次のように表示されます:

<img src="/img/tutorial/security/image05.png">

### 自分のユーザーデータを取得 { #get-your-own-user-data }

`GET` の path `/users/me` を使います。

次のようなユーザーデータが取得できます:

```JSON
{
  "username": "johndoe",
  "email": "******@****.***",
  "full_name": "John Doe",
  "disabled": false,

func adminMiddleware(f http.HandlerFunc, flags ...hFlag) http.HandlerFunc {
	// Collect all flags with bitwise-OR and assign operator
	var handlerFlags hFlag
	for _, flag := range flags {
		handlerFlags |= flag
	}

	// Get name of the handler using reflection.
	handlerName := getHandlerName(f, "adminAPIHandlers")

	var handler http.HandlerFunc = func(w http.ResponseWriter, r *http.Request) {
		// Update request context with `logger.ReqInfo`.

     */
    @Override
    public boolean hasDefaultCredentials() {
        return this.getDefaultCredentials() != null && !this.getDefaultCredentials().isAnonymous();
    }

    /**
     * Gets the default credentials for this context.
     *
     * @return the default credentials for this context
     */
    protected abstract Credentials getDefaultCredentials();

    /**
     * {@inheritDoc}

     */
    public OptionalEntity<StemmerOverrideItem> getStemmerOverrideItem(final String dictId, final long id) {
        return getStemmerOverrideFile(dictId).map(file -> file.get(id).get());
    }

    /**
     * Stores (creates or updates) a stemmer override item in the specified dictionary.
     *
     * If the item ID is 0, this method performs an insert operation. Otherwise,

                .filter(s -> !s.isEmpty())
                .collect(Collectors.toList());

        String prHead = headSha;
        if (parents.size() >= 2) {
            String p1 = parents.get(0);
            String p2 = parents.get(1);
            if (p1.equals(targetSha)) {
                prHead = p2;
            } else if (p2.equals(targetSha)) {
                prHead = p1;
            }
        }

    val serverHandshake = serverHandshakeFuture.get()
    assertThat(listOf(clientCertificate.certificate, clientIntermediate.certificate))
      .isEqualTo(serverHandshake.peerCertificates)
    assertThat(listOf(serverCertificate.certificate, serverIntermediate.certificate))
      .isEqualTo(serverHandshake.localCertificates)
    val clientHandshake = clientHandshakeFuture.get()