假设有一个客户端尝试在**查询参数**中发送一些**额外的**数据，它将会收到一个**错误**响应。

例如，如果客户端尝试发送一个值为 `plumbus` 的 `tool` 查询参数，如：

```http
https://example.com/items/?limit=10&tool=plumbus
```

他们将收到一个**错误**响应，告诉他们查询参数 `tool` 是不允许的：

```json
{
    "detail": [
        {
            "type": "extra_forbidden",
            "loc": ["query", "tool"],
            "msg": "Extra inputs are not permitted",
            "input": "plumbus"
        }
    ]
}
```

        MockletHttpServletRequest req = getMockRequest();
        req.addHeader("Authorization", token);
        try {
            accessTokenHelper.getAccessTokenFromRequest(req);
            fail();
        } catch (InvalidAccessTokenException e) {
            // ok
        }
    }

    @Test
    public void test_getAccessTokenFromRequest_bad2() {
        final String token = "Bearer";

    try {
      pseudoTimedGetUninterruptibly(future, 10, MILLISECONDS);
      fail();
    } catch (TimeoutException expected) {
    } catch (ExecutionException e) {
      throw new AssertionError(e);
    }
  }

  static void verifyTimedGetOnPendingFuture(Future<?> future) {
    try {
      getUninterruptibly(future, 0, SECONDS);
      fail();
    } catch (TimeoutException expected) {
    } catch (ExecutionException e) {

 * (local group) using the SAMR RPC interface.
 */
public class MsrpcSamrOpenAlias extends samr.SamrOpenAlias {

    /**
     * Creates a new request to open an alias handle.
     *
     * @param handle the domain handle
     * @param access the desired access rights
     * @param rid the relative identifier of the alias
     * @param aliasHandle the alias handle to be populated
     */

```http
https://example.com/items/?limit=10&tool=plumbus
```

Recibirán un response de **error** que les indica que el parámetro query `tool` no está permitido:

```json
{
    "detail": [
        {
            "type": "extra_forbidden",
            "loc": ["query", "tool"],
            "msg": "Extra inputs are not permitted",
            "input": "plumbus"
        }
    ]
}
```

        self.auto_error = auto_error

    def make_not_authenticated_error(self) -> HTTPException:
        return HTTPException(
            status_code=HTTP_401_UNAUTHORIZED,
            detail="Not authenticated",
            headers={"WWW-Authenticate": "Bearer"},
        )

    async def __call__(self, request: Request) -> str | None:
        authorization = request.headers.get("Authorization")

    cookieJar.enqueueRequestCookies(
      Cookie
        .Builder()
        .name("a")
        .value("b")
        .domain(server.hostName)
        .build(),
      Cookie
        .Builder()
        .name("c")
        .value("d")
        .domain(server.hostName)
        .build(),
    )
    client =
      client
        .newBuilder()
        .cookieJar(cookieJar)

        try {
            preauthService.validatePreauthIntegrity(sessionId, incorrectHash);
            fail("Expected CIFSException");
        } catch (CIFSException e) {
            // Expected
        }

        assertFalse(context.isValid());

        // Further operations on invalid context should fail
        assertThrows(CIFSException.class, () -> {

<span style="color: green;">INFO</span>:     Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)
```

</div>

之後若你造訪 `/openapi.json`、`/docs` 或 `/redoc`，會看到如下的 `404 Not Found` 錯誤：

```JSON
{
    "detail": "Not Found"
}

```json
{
    "detail": [
        {
            "type": "extra_forbidden",
            "loc": ["cookie", "santa_tracker"],
            "msg": "Extra inputs are not permitted",
            "input": "good-list-please",
        }
    ]
}