} `xml:"SystemRecommendations"`
}

// This optional functionality allows vendors to report space information to Veeam products, and Veeam will make placement
// decisions based on this information. For example, Veeam Backup & Replication has a Scale-out-Backup-Repository feature where
// multiple buckets can be used together. The placement logic for additional backup files is based on available space. Other values

///

## Declarar metadatos { #declare-metadata }

Puedes declarar todos los mismos parámetros que para `Query`.

Por ejemplo, para declarar un valor de metadato `title` para el parámetro de path `item_id` puedes escribir:

{* ../../docs_src/path_params_numeric_validations/tutorial001_an_py310.py hl[10] *}

/// note | Nota

<img src="/img/tutorial/security/image12.png">

## Check the username { #check-the-username }

Here's a more complete example.

Use a dependency to check if the username and password are correct.

For this, use the Python standard module [`secrets`](https://docs.python.org/3/library/secrets.html) to check the username and password.

{* ../../docs_src/app_testing/app_a_py310/test_main.py hl[3] *}


...і написати код для тестів так само як і раніше.

## Тестування: розширений приклад { #testing-extended-example }

Тепер розширимо цей приклад і додамо більше деталей, щоб побачити, як тестувати різні частини.

### Розширений файл застосунку **FastAPI** { #extended-fastapi-app-file }

Залишимо ту саму структуру файлів:

Combining encryption and compression is not safe in all setups.
This is particularly so if the compression ratio of your content reveals information about it.
See [CRIME TLS](https://en.wikipedia.org/wiki/CRIME) as an example of this.

Therefore, compression is disabled when encrypting by default, and must be enabled separately.

Consult our security experts on [SUBNET](https://min.io/pricing) to help you evaluate if

    # o sqlPackage: (NotRequired - Default all packages)
    #  The package of SQL file for outsideSql.
    #  This is basically for narrowing SQL-searching target,
    #  for example, when the project has SQL files for other framework.
    #  So basically you don't need this.
    #
    #  You can use variable '$$PACKAGE_BASE$$' that means 'packageBase'.

   * not propagated (otherwise the original exception will be lost).
   *
   * <p>If {@code swallowIOException} is true then we never throw {@code IOException} but merely log
   * it.
   *
   * <p>Example:
   *
   * {@snippet :
   * public void useStreamNicely() throws IOException {
   *   SomeStream stream = new SomeStream("foo");
   *   boolean threw = true;
   *   try {

 * <a href="http://en.wikipedia.org/wiki/Decorator_pattern">decorator pattern</a>.
 *
 * <p><b>Warning:</b> The methods of {@code ForwardingSortedSet} forward <i>indiscriminately</i> to
 * the methods of the delegate. For example, overriding {@link #add} alone <i>will not</i> change
 * the behavior of {@link #addAll}, which can lead to unexpected behavior. In this case, you should

            assertThrows(IllegalArgumentException.class, () -> new DummySmbResourceLocator(null));
        }

        @Test
        void unsupportedProtocolThrows() {
            String url = "http://example.com";
            assertThrows(MalformedURLException.class, () -> new DummySmbResourceLocator(url));
        }

        @Test
        void rootUrlIsRoot() throws Exception {

強制所有傳入請求正確設定 `Host` 標頭，以防範 HTTP Host Header 攻擊。

{* ../../docs_src/advanced_middleware/tutorial002_py310.py hl[2,6:8] *}

支援以下參數：

- `allowed_hosts` - 允許作為主機名稱的網域名稱清單。支援萬用字元網域（例如 `*.example.com`）以比對子網域。若要允許任意主機名稱，可使用 `allowed_hosts=["*"]`，或乾脆不要加上此中介軟體。
- `www_redirect` - 若設為 True，對允許主機的不含 www 版本的請求會被重新導向至其 www 對應版本。預設為 `True`。

若傳入請求驗證失敗，將回傳 `400` 回應。

## `GZipMiddleware` { #gzipmiddleware }