Например, в одном из способов использования спецификации OAuth2 (называемом "потоком пароля") требуется отправить `username` и `password` в виде полей формы.

Данный способ требует отправку данных для авторизации посредством формы (а не JSON) и обязательного наличия в форме строго именованных полей  `username` и `password`.

            requiresNotEc2Agent()
        }

        paramsForBuildToolBuild(BuildToolBuildJvm, Os.LINUX)

        params {
            password("env.DEVELOCITY_ACCESS_KEY", "%ge.gradle.org.access.key%;%develocity.grdev.net.access.key%")
            password("env.ORG_GRADLE_PROJECT_botGradleGitHubToken", "%github.bot-gradle.token%")
        }

        features {

{"index":{"_index":"fess_user.user","_id":"YWRtaW4="}}

            false, false, "keyword", 0, 0, null, null, false, null, null, null, null, null, false);
    protected final ColumnInfo _columnPassword = cci("password", "password", null, null, String.class, "password", null, false, false,
            false, "keyword", 0, 0, null, null, false, null, null, null, null, null, false);

errors.invalid_kuromoji_segmentation=Il numero di segmentazioni di {0} non corrisponde al numero di segmentazioni di {1}.
errors.invalid_str_is_included = {0} non è valido in {1}.
errors.blank_password = La password è obbligatoria.
errors.invalid_confirm_password = La conferma della password non corrisponde.
errors.cannot_delete_doc_because_of_running = Il crawler è in esecuzione. Impossibile eliminare il documento.

        final Map<String, Object> sourceMap = new HashMap<>();
        if (name != null) {
            sourceMap.put("name", name);
        }
        if (password != null) {
            sourceMap.put("password", password);
        }
        if (groups != null) {
            sourceMap.put("groups", groups);
        }
        if (roles != null) {
            sourceMap.put("roles", roles);
        }

      },
      "port": {
        "type": "integer"
      },
      "protocolScheme": {
        "type": "keyword"
      },
      "username": {
        "type": "keyword"
      },
      "password": {
        "type": "keyword"
      },
      "parameters": {
        "type": "keyword"
      },
      "fileConfigId": {
        "type": "keyword"
      },
      "createdBy": {
        "type": "keyword"

            final String username = userCredential.getUser();
            final String password = userCredential.getPassword();
            if (!fessConfig.isAdminUser(username)) {
                final OptionalEntity<FessUser> ldapUser = ComponentUtil.getLdapManager().login(username, password);
                if (ldapUser.isPresent()) {
                    return ldapUser;
                }
            }

      },
      "authRealm": {
        "type": "keyword"
      },
      "protocolScheme": {
        "type": "keyword"
      },
      "username": {
        "type": "keyword"
      },
      "password": {
        "type": "keyword"
      },
      "parameters": {
        "type": "keyword"
      },
      "webConfigId": {
        "type": "keyword"
      },
      "createdBy": {
        "type": "keyword"

Para lidar com isso, primeiramente nós convertemos o `username` e o `password` para `bytes`, codificando-os com UTF-8.

Então nós podemos utilizar o `secrets.compare_digest()` para garantir que o `credentials.username` é `"stanleyjobson"`, e que o `credentials.password` é `"swordfish"`.

{* ../../docs_src/security/tutorial007_an_py39.py hl[1,12:24] *}

Isso seria parecido com:

```Python