/// check

Notice that nowhere in the code is the plaintext password "`secret`", we only have the hashed version.

///

<img src="/img/tutorial/security/image08.png">

Call the endpoint `/users/me/`, you will get the response as:

```JSON
{
  "username": "johndoe",
  "email": "******@****.***",
  "full_name": "John Doe",
  "disabled": false
}
```

def get_updated_config_content() -> dict[str, Any]:
    config = get_en_config()
    languages = [{"en": "/"}]
    new_alternate: list[dict[str, str]] = []
    # Language names sourced from https://quickref.me/iso-639-1
    # Contributors may wish to update or change these, e.g. to fix capitalization.
    language_names_path = Path(__file__).parent / "../docs/language_names.yml"

Username: `johndoe`
Password: `secret`

/// check

코드 어디에도 평문 패스워드 "`secret`" 이 없다는 점에 유의하십시오. 해시된 버전만 있습니다.

///

<img src="/img/tutorial/security/image08.png">

`/users/me/` 를 호출하면 다음과 같은 응답을 얻을 수 있습니다:

```JSON
{
  "username": "johndoe",
  "email": "******@****.***",
  "full_name": "John Doe",
  "disabled": false
}
```

It looks like the following:

```
Execution failed for task ':architecture-test:checkBinaryCompatibility'.
> A failure occurred while executing me.champeau.gradle.japicmp.JApiCmpWorkAction
   > Detected binary changes.
         - current: ...
         - baseline: ...
     

使用如下凭证：

用户名: `johndoe` 密码: `secret`

/// check | 检查

注意，代码中没有明文密码**`secret`**，只保存了它的哈希值。

///

<img src="https://fastapi.tiangolo.com/img/tutorial/security/image08.png">

调用 `/users/me/` 端点，收到下面的响应：

```JSON
{
  "username": "johndoe",
  "email": "******@****.***",
  "full_name": "John Doe",
  "disabled": false
}
```

    List<Integer> collection =
        new ArrayList<Integer>(nums) {
          @Override
          public Iterator<Integer> iterator() {
            throw new AssertionFailedError("Don't iterate me!");
          }
        };
    assertEquals(5, FluentIterable.from(collection).size());
  }

  public void testContains_nullSetYes() {
    Iterable<String> set = newHashSet("a", null, "b");

次の認証情報を使用します：

Username: `johndoe`
Password: `secret`

/// check | 確認

コードのどこにも平文のパスワード"`secret`"はなく、ハッシュ化されたものしかないことを確認してください。

///

<img src="/img/tutorial/security/image08.png">

エンドポイント`/users/me/`を呼び出すと、次のようなレスポンスが得られます：

```JSON
{
  "username": "johndoe",
  "email": "******@****.***",
  "full_name": "John Doe",
  "disabled": false
}
```

xrŽûÀxi`juOªszin滸Ē*˜' ¾ qjD ¦¼aÜc¥®ºImW M}ò²CsG¢xcÐtslôwWHªCY÷QKph¸Vñú}n18ôO¢ebv®VÖILxgk !iaxm„V_ÚÅ@GM[LÏû>TU\rÉ”°¡Çó eTi[¦oñwwýznˆ^q ãZfYI^KuoïuWˆLñˆNñ~Lª ˜´‚òÔà~DÕpÌ_ZZKxP]Õ²«ƒŽ 6/¼’©z rgLˆ7í~L# ܈• ¸¾“t - ¬è UoV|k±k„q~ÜqzRGW¸NïON DB@FHbÚÆ ñncE²{¥me `r IxGJ~KÕ>kv\¢¯req£¯Îéü >)Þê)i noŠÐQrVy²HITqIò{¼L~so¸ ˜ Š²@c¾ ºµ‚®Ð^`dD_V^iLzKdlwÕº¥ ² ° ,ª«Ð²tåB†7“fVoLFª—˜š˜ £€‘¸ …`Šƒ! , öWwNÚaws²eÐPGxnïUºDsGBýptÜdxj@Ä·¹²"oÕB¬ it ¸…UxRqåNg|SVIÖBqq¥ <IEˆ¤{_UòC¼ gT3 ¸ ñhGmfq Ú3q\› ¼ GTBwÖºwmeqˆqyX`ªýh²sex»llo¸t1...

```

#### Docker Cache { #docker-cache }

There's an important trick in this `Dockerfile`, we first copy the **file with the dependencies alone**, not the rest of the code. Let me tell you why is that.

```Dockerfile
COPY ./requirements.txt /code/requirements.txt
```

    from typing import Annotated

    from fastapi import Security, FastAPI

    from .db import User
    from .security import get_current_active_user

    app = FastAPI()

    @app.get("/users/me/items/")
    async def read_own_items(
        current_user: Annotated[User, Security(get_current_active_user, scopes=["items"])]
    ):
        return [{"item_id": "Foo", "owner": current_user.username}]
    ```