Como ahora estamos declarando esos scopes, aparecerán en la documentación de la API cuando inicies sesión/autorices.

Y podrás seleccionar cuáles scopes quieres dar de acceso: `me` y `items`.

Este es el mismo mecanismo utilizado cuando das permisos al iniciar sesión con Facebook, Google, GitHub, etc:

<img src="/img/tutorial/security/image11.png">

## Token JWT con scopes

success.update_crawler_params = Paramètres mis à jour.
success.delete_doc_from_index = Démarrage d'un processus de suppression de documents d'un index.
success.crawling_info_delete_all = Données de session supprimées.
success.start_crawl_process = Démarrage d'un processus d'exploration.
success.upload_design_file = {0} mis à jour.
success.update_design_jsp_file = {0} mis à jour.

     * @return the calculated hash
     */
    public static byte[] nTOWFv1(final String password) {
        return getNTHash(password);
    }

    /**
     * Creates the NTLM2 session response for the supplied information.
     *
     * @param passwordHash the password hash to use
     * @param serverChallenge the server challenge bytes
     * @param clientChallenge the client challenge bytes

*   `tf.compat.v1.Session`
    * `tf.compat.v1.Session.partial_run` and `tf.compat.v1.Session.partial_run_setup` will be deprecated in the next release.

### Known Caveats

* `tf.lite`

* Багато додаткових функцій (завдяки Starlette) як-от:
    * **WebSockets**
    * надзвичайно прості тести на основі HTTPX та `pytest`
    * **CORS**
    * **Cookie Sessions**
    * ...та більше.

## Продуктивність

            assertFalse(isValid, "Tampered data should fail verification");
        }

        @Test
        @DisplayName("Should handle different session keys")
        void testDifferentSessionKeys() throws GeneralSecurityException {
            byte[] sessionKey1 = new byte[16];
            Arrays.fill(sessionKey1, (byte) 0x11);

        RenderDataUtil.register(data, "crawlingInfoItems", crawlingInfoService.getCrawlingInfoList(crawlingInfoPager)); // page navi

        // restore from pager
        copyBeanToBean(crawlingInfoPager, form, op -> op.include("sessionId"));
    }

    // ===================================================================================
    //                                                                        Edit Execute

    }

    @Test
    void testDoFilter_sessionWithoutAuth_shouldChallenge() throws Exception {
        // Initialize filter first
        initializeFilter();

        // Test that having a session but no auth still challenges
        when(request.getHeader("Authorization")).thenReturn(null);
        when(httpSession.getAttribute("NtlmHttpAuth")).thenReturn(null);

        message[46] = 22; // Max Length
        message[47] = 0;
        message[48] = (byte) 132; // Offset
        message[49] = 0;
        message[50] = 0;
        message[51] = 0;

        // Session Key (empty, offset 154)
        message[52] = 0; // Length
        message[53] = 0;
        message[54] = 0; // Max Length
        message[55] = 0;
        message[56] = (byte) 154; // Offset

            return null;
        }

        @Override
        public Long getCreateTime() {
            return null;
        }

        @Override
        public void setSessionId(String sessionId) {
        }

        @Override
        public void setWeight(float weight) {
        }

        @Override
        public float getWeight() {
            return 0.0f;
        }