<img src="/img/tutorial/security/image12.png">

## Check the username { #check-the-username }

Here's a more complete example.

Use a dependency to check if the username and password are correct.

For this, use the Python standard module [`secrets`](https://docs.python.org/3/library/secrets.html) to check the username and password.

{* ../../docs_src/app_testing/app_a_py310/test_main.py hl[3] *}


...і написати код для тестів так само як і раніше.

## Тестування: розширений приклад { #testing-extended-example }

Тепер розширимо цей приклад і додамо більше деталей, щоб побачити, як тестувати різні частини.

### Розширений файл застосунку **FastAPI** { #extended-fastapi-app-file }

Залишимо ту саму структуру файлів:

Combining encryption and compression is not safe in all setups.
This is particularly so if the compression ratio of your content reveals information about it.
See [CRIME TLS](https://en.wikipedia.org/wiki/CRIME) as an example of this.

Therefore, compression is disabled when encrypting by default, and must be enabled separately.

Consult our security experts on [SUBNET](https://min.io/pricing) to help you evaluate if

    # o sqlPackage: (NotRequired - Default all packages)
    #  The package of SQL file for outsideSql.
    #  This is basically for narrowing SQL-searching target,
    #  for example, when the project has SQL files for other framework.
    #  So basically you don't need this.
    #
    #  You can use variable '$$PACKAGE_BASE$$' that means 'packageBase'.

```shell
./mvnw clean install
```

If you want to run a single test, you'll need to pass multiple flags because
Guava is a multi-module project. For performance reasons, you may also wish to
skip generating Javadoc. For example:

```shell
./mvnw clean install -Dtest=FinalizableReferenceQueueTest -DfailIfNoTests=false -Dmaven.javadoc.skip
```

(Our benchmarks, however, are
[not set up to run easily externally][benchmarks-run].)

   * not propagated (otherwise the original exception will be lost).
   *
   * <p>If {@code swallowIOException} is true then we never throw {@code IOException} but merely log
   * it.
   *
   * <p>Example:
   *
   * {@snippet :
   * public void useStreamNicely() throws IOException {
   *   SomeStream stream = new SomeStream("foo");
   *   boolean threw = true;
   *   try {

 * <a href="http://en.wikipedia.org/wiki/Decorator_pattern">decorator pattern</a>.
 *
 * <p><b>Warning:</b> The methods of {@code ForwardingSortedSet} forward <i>indiscriminately</i> to
 * the methods of the delegate. For example, overriding {@link #add} alone <i>will not</i> change
 * the behavior of {@link #addAll}, which can lead to unexpected behavior. In this case, you should

            assertThrows(IllegalArgumentException.class, () -> new DummySmbResourceLocator(null));
        }

        @Test
        void unsupportedProtocolThrows() {
            String url = "http://example.com";
            assertThrows(MalformedURLException.class, () -> new DummySmbResourceLocator(url));
        }

        @Test
        void rootUrlIsRoot() throws Exception {

強制所有傳入請求正確設定 `Host` 標頭，以防範 HTTP Host Header 攻擊。

{* ../../docs_src/advanced_middleware/tutorial002_py310.py hl[2,6:8] *}

支援以下參數：

- `allowed_hosts` - 允許作為主機名稱的網域名稱清單。支援萬用字元網域（例如 `*.example.com`）以比對子網域。若要允許任意主機名稱，可使用 `allowed_hosts=["*"]`，或乾脆不要加上此中介軟體。
- `www_redirect` - 若設為 True，對允許主機的不含 www 版本的請求會被重新導向至其 www 對應版本。預設為 `True`。

若傳入請求驗證失敗，將回傳 `400` 回應。

## `GZipMiddleware` { #gzipmiddleware }

        value = "\"John Doe\",\"Software Engineer\",\"john.doe@example.com\",\"Loves \"\"coding\"\" and coffee\"";
        result = KuromojiCSVUtil.parse(value);
        assertEquals(4, result.length);
        assertEquals("John Doe", result[0]);
        assertEquals("Software Engineer", result[1]);
        assertEquals("john.doe@example.com", result[2]);
        assertEquals("\"Loves \"\"coding\"\" and coffee\"", result[3]);