## About security, APIs, and docs { #about-security-apis-and-docs }

Hiding your documentation user interfaces in production *shouldn't* be the way to protect your API.

That doesn't add any extra security to your API, the *path operations* will still be available where they are.

If there's a security flaw in your code, it will still exist.

記得，當你從 `fastapi` 匯入 `Query`、`Path` 等時，它們其實是回傳特殊類別的函式。

///

/// tip

注意，每個帶有型別、預設值與 `Field` 的模型屬性，其結構和「路徑操作函式」的參數相同，只是把 `Path`、`Query`、`Body` 換成了 `Field`。

///

## 加入額外資訊 { #add-extra-information }

你可以在 `Field`、`Query`、`Body` 等中宣告額外資訊。這些資訊會被包含在產生的 JSON Schema 中。

你會在後續文件中學到更多關於加入額外資訊的內容，特別是在宣告範例時。

/// warning

傳入 `Field` 的額外鍵也會出現在你的應用程式所產生的 OpenAPI schema 中。

                getQuery("", new String[] { "test", "query1 OR query2" }, Collections.emptyMap(), Collections.emptyMap(), false));
        assertEquals("(test || extra)",
                getQuery("", new String[] { "test || extra" }, Collections.emptyMap(), Collections.emptyMap(), false));
        assertEquals("query1 query2",

    disabled = user_dict["disabled"],
    hashed_password = user_dict["hashed_password"],
)
```

/// info | Info

Eine ausführlichere Erklärung von `**user_dict` finden Sie in [der Dokumentation für **Extra Modelle**](../extra-models.md#about-user-in-dict).

///

## Den Token zurückgeben { #return-the-token }

* Ele expõe um objeto python [`SpooledTemporaryFile`](https://docs.python.org/3/library/tempfile.html#tempfile.SpooledTemporaryFile) que você pode passar diretamente para outras bibliotecas que esperam um objeto semelhante a um arquivo.

### `UploadFile` { #uploadfile }

`UploadFile` tem os seguintes atributos:

  static <T extends ForwardingObject> void testForwardingObject(Class<T> forwarderClass) {
    List<Class<?>> interfaces = new ArrayList<>(Arrays.asList(forwarderClass.getInterfaces()));
    // Desugaring may introduce AutoCloseable as an extra interface.
    interfaces.remove(AutoCloseable.class);
    @SuppressWarnings("unchecked") // super interface type of T
    Class<? super T> interfaceType = (Class<? super T>) Iterables.getOnlyElement(interfaces);

  static <T extends ForwardingObject> void testForwardingObject(Class<T> forwarderClass) {
    List<Class<?>> interfaces = new ArrayList<>(Arrays.asList(forwarderClass.getInterfaces()));
    // Desugaring may introduce AutoCloseable as an extra interface.
    interfaces.remove(AutoCloseable.class);
    @SuppressWarnings("unchecked") // super interface type of T
    Class<? super T> interfaceType = (Class<? super T>) Iterables.getOnlyElement(interfaces);

        ByteBuffer bb = ByteBuffer.wrap(result).order(java.nio.ByteOrder.LITTLE_ENDIAN);

        long mostSig = guid.getMostSignificantBits();
        long leastSig = guid.getLeastSignificantBits();

        // Extract GUID components from UUID
        int data1 = (int) (mostSig >>> 32); // first 4 bytes
        short data2 = (short) (mostSig >>> 16); // next 2 bytes
        short data3 = (short) mostSig; // next 2 bytes

        String encodedFieldName = BaseEncoding.base64().encode(originalFieldName.getBytes(StandardCharsets.UTF_8));
        String fullFieldName = Constants.FACET_FIELD_PREFIX + encodedFieldName;

        // Extract the encoded part
        String extractedEncoded = fullFieldName.substring(Constants.FACET_FIELD_PREFIX.length());
        assertEquals(encodedFieldName, extractedEncoded);

        // Decode back to original

注意，从 `fastapi` 导入的 `Query`、`Path` 等对象实际上都是返回特殊类的函数。

///

/// tip | 提示

注意，模型属性的类型、默认值及 `Field` 的代码结构与*路径操作函数*的参数相同，只不过是用 `Field` 替换了`Path`、`Query`、`Body`。

///

## 添加更多信息 { #add-extra-information }

`Field`、`Query`、`Body` 等对象里可以声明更多信息，并且 JSON Schema 中也会集成这些信息。

*声明示例*一章中将详细介绍添加更多信息的知识。

/// warning | 警告

传递给 `Field` 的额外键也会出现在你的应用生成的 OpenAPI 架构中。