fastapi_14455

{"status": "ok", "stdout": "fastapi/openapi/models.py:422:    securitySchemes: Optional[Dict[str, Union[SecurityScheme, Reference]]] = None\nfastapi/openapi/utils.py:523:                    components.setdefault(\"securitySchemes\", {}).update(\nfastapi/openapi/utils.py:542:                    components.setdefault(\"securitySchemes\", {}).update(\n", "exit_code": 0}

{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "        if isinstance(route, routing.APIRoute):\n            result = get_openapi_path(\n                route=route,\n                operation_ids=operation_ids,\n                model_name_map=model_name_map,\n                field_mapping=field_mapping,\n                separate_input_output_schemas=separate_input_output_schemas,\n            )\n            if result:\n                path, security_schemes, path_definitions = result\n                if path:\n                    paths.setdefault(route.path_format, {}).update(path)\n                if security_schemes:\n                    components.setdefault(\"securitySchemes\", {}).update(\n                        security_schemes\n                    )\n                if path_definitions:\n                    definitions.update(path_definitions)\n    for webhook in webhooks or []:\n        if isinstance(webhook, routing.APIRoute):\n            result = get_openapi_path(\n                route=webhook,\n                operation_ids=operation_ids,\n                model_name_map=model_name_map,\n                field_mapping=field_mapping,\n                separate_input_output_schemas=separate_input_output_schemas,\n            )\n            if result:\n                path, security_schemes, path_definitions = result\n                if path:\n                    webhook_paths.setdefault(webhook.path_format, {}).update(path)\n                if security_schemes:\n                    components.setdefault(\"securitySchemes\", {}).update(\n                        security_schemes\n                    )\n                if path_definitions:\n                    definitions.update(path_definitions)\n    if definitions:\n        components[\"schemas\"] = {k: definitions[k] for k in sorted(definitions)}\n    if components:\n        output[\"components\"] = components\n    output[\"paths\"] = paths\n    if webhook_paths:\n        output[\"webh

{"status": "error", "error_type": "CommandError", "error_message": "Command failed with exit code 2", "details": {"stdout": "", "stderr": "/bin/bash: -c: line 1: syntax error near unexpected token `|'\n/bin/bash: -c: line 1: `grep<|tool_call>call:run_command{command:'\n", "exit_code": 2}}

{"status": "ok", "stdout": "250:def get_openapi_path(\n321:                        ) = get_openapi_path(\n511:            result = get_openapi_path(\n530:            result = get_openapi_path(\n", "exit_code": 0}

{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_path(\n    *,\n    route: routing.APIRoute,\n    operation_ids: Set[str],\n    model_name_map: ModelNameMap,\n    field_mapping: Dict[\n        Tuple[ModelField, Literal[\"validation\", \"serialization\"]], JsonSchemaValue\n    ],\n    separate_input_output_schemas: bool = True,\n) -> Tuple[Dict[str, Any], Dict[str, Any], Dict[str, Any]]:\n    path = {}\n    security_schemes: Dict[str, Any] = {}\n    definitions: Dict[str, Any] = {}\n    assert route.methods is not None, \"Methods must be a list\"\n    if isinstance(route.response_class, DefaultPlaceholder):\n        current_response_class: Type[Response] = route.response_class.value\n    else:\n        current_response_class = route.response_class\n    assert current_response_class, \"A response class is needed to generate OpenAPI\"\n    route_response_media_type: Optional[str] = current_response_class.media_type\n    if route.include_in_schema:\n        for method in route.methods:\n            operation = get_openapi_operation_metadata(\n                route=route, method=method, operation_ids=operation_ids\n            )\n            parameters: List[Dict[str, Any]] = []\n            flat_dependant = get_flat_dependant(route.dependant, skip_repeats=True)\n            security_definitions, operation_security = get_openapi_security_definitions(\n                flat_dependant=flat_dependant\n            )\n            if operation_security:\n                operation.setdefault(\"security\", []).extend(operation_security)\n            if security_definitions:\n                security_schemes.update(security_definitions)\n            operation_parameters = _get_openapi_operation_parameters(\n                dependant=route.dependant,\n                model_name_map=model_name_map,\n                field_mapping=field_mapping,\n                separate_input_output_schemas=separate_input_output_schemas,\n            )\n           

{"status": "ok", "stdout": "78:def get_openapi_security_definitions(\n277:            security_definitions, operation_security = get_openapi_security_definitions(\n", "exit_code": 0}

{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_security_definitions(\n    flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n    security_definitions = {}\n    operation_security = []\n    for security_requirement in flat_dependant.security_requirements:\n        security_definition = jsonable_encoder(\n            security_requirement.security_scheme.model,\n            by_alias=True,\n            exclude_none=True,\n        )\n        security_name = security_requirement.security_scheme.scheme_name\n        security_definitions[security_name] = security_definition\n        operation_security.append({security_name: security_requirement.scopes})\n    return security_definitions, operation_security\n\n\ndef _get_openapi_operation_parameters(\n    *,\n    dependant: Dependant,\n    model_name_map: ModelNameMap,\n    field_mapping: Dict[\n        Tuple[ModelField, Literal[\"validation\", \"serialization\"]], JsonSchemaValue\n    ],\n    separate_input_output_schemas: bool = True,\n) -> List[Dict[str, Any]]:\n    parameters = []\n    flat_dependant = get_flat_dependant(dependant, skip_repeats=True)\n    path_params = _get_flat_fields_from_params(flat_dependant.path_params)\n    query_params = _get_flat_fields_from_params(flat_dependant.query_params)\n    header_params = _get_flat_fields_from_params(flat_dependant.header_params)\n    cookie_params = _get_flat_fields_from_params(flat_dependant.cookie_params)\n    parameter_groups = [\n        (ParamTypes.path, path_params),\n        (ParamTypes.query, query_params),\n        (ParamTypes.header, header_params),\n        (ParamTypes.cookie, cookie_params),\n    ]\n    default_convert_underscores = True\n    if len(flat_dependant.header_params) == 1:\n        first_field = flat_dependant.header_params[0]\n        if lenient_issubclass(first_field.type_, BaseModel):\n            default_convert_underscores = getattr(\n", "start_line": 78, "end_line": 120, "tota

{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "    \"2XX\": \"Success\",\n    \"3XX\": \"Redirection\",\n    \"4XX\": \"Client Error\",\n    \"5XX\": \"Server Error\",\n    \"DEFAULT\": \"Default Response\",\n}\n\n\ndef get_openapi_security_definitions(\n    flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n    security_definitions = {}\n    operation_security = []\n    for security_requirement in flat_dependant.security_requirements:\n        security_definition = jsonable_encoder(\n            security_requirement.security_scheme.model,\n            by_alias=True,\n            exclude_none=True,\n        )\n        security_name = security_requirement.security_scheme.scheme_name\n        security_definitions[security_name] = security_definition\n        operation_security.append({security_name: security_requirement.scopes})\n    return security_definitions, operation_security\n\n\ndef _get_openapi_operation_parameters(\n    *,\n    dependant: Dependant,\n    model_name_map: ModelNameMap,\n    field_mapping: Dict[\n        Tuple[ModelField, Literal[\"validation\", \"serialization\"]], JsonSchemaValue\n    ],\n    separate_input_output_schemas: bool = True,\n) -> List[Dict[str, Any]]:\n    parameters = []\n    flat_dependant = get_flat_dependant(dependant, skip_repeats=True)\n    path_params = _get_flat_fields_from_params(flat_dependant.path_params)\n    query_params = _get_flat_fields_from_params(flat_dependant.query_params)\n    header_params = _get_flat_fields_from_params(flat_dependant.header_params)\n    cookie_params = _get_flat_fields_from_params(flat_dependant.cookie_params)\n    parameter_groups = [\n", "start_line": 70, "end_line": 110, "total_lines": 558, "is_truncated": false}

{"status": "ok", "stdout": "{\n  \"openapi\": \"3.1.0\",\n  \"info\": {\n    \"title\": \"FastAPI\",\n    \"version\": \"0.1.0\"\n  },\n  \"paths\": {\n    \"/\": {\n      \"get\": {\n        \"summary\": \"Root\",\n        \"operationId\": \"root__get\",\n        \"responses\": {\n          \"200\": {\n            \"description\": \"Successful Response\",\n            \"content\": {\n              \"application/json\": {\n                \"schema\": {}\n              }\n            }\n          }\n        },\n        \"security\": [\n          {\n            \"OAuth2PasswordBearer\": []\n          },\n          {\n            \"OAuth2PasswordBearer\": []\n          }\n        ]\n      }\n    }\n  },\n  \"components\": {\n    \"securitySchemes\": {\n      \"OAuth2PasswordBearer\": {\n        \"type\": \"oauth2\",\n        \"flows\": {\n          \"password\": {\n            \"scopes\": {\n              \"user\": \"User scope\"\n            },\n            \"tokenUrl\": \"token\"\n          }\n        }\n      }\n    }\n  }\n}\n", "exit_code": 0}

{"status": "ok", "stdout": "{\n  \"OAuth2PasswordBearer\": {\n    \"type\": \"oauth2\",\n    \"flows\": {\n      \"password\": {\n        \"scopes\": {\n          \"user\": \"User scope\"\n        },\n        \"tokenUrl\": \"token\"\n      }\n    }\n  }\n}\n[\n  {\n    \"OAuth2PasswordBearer\": []\n  },\n  {\n    \"OAuth2PasswordBearer\": []\n  }\n]\n", "exit_code": 0}

{"status": "ok", "filepath": "fastapi/security/oauth2.py", "content": "from typing import Any, Dict, List, Optional, Union, cast\n\nfrom annotated_doc import Doc\nfrom fastapi.exceptions import HTTPException\nfrom fastapi.openapi.models import OAuth2 as OAuth2Model\nfrom fastapi.openapi.models import OAuthFlows as OAuthFlowsModel\nfrom fastapi.param_functions import Form\nfrom fastapi.security.base import SecurityBase\nfrom fastapi.security.utils import get_authorization_scheme_param\nfrom starlette.requests import Request\nfrom starlette.status import HTTP_401_UNAUTHORIZED\n\n# TODO: import from typing when deprecating Python 3.9\nfrom typing_extensions import Annotated\n\n\nclass OAuth2PasswordRequestForm:\n    \"\"\"\n    This is a dependency class to collect the `username` and `password` as form data\n    for an OAuth2 password flow.\n\n    The OAuth2 specification dictates that for a password flow the data should be\n    collected using form data (instead of JSON) and that it should have the specific\n    fields `username` and `password`.\n\n    All the initialization parameters are extracted from the request.\n\n    Read more about it in the\n    [FastAPI docs for Simple OAuth2 with Password and Bearer](https://fastapi.tiangolo.com/tutorial/security/simple-oauth2/).\n\n    ## Example\n\n    ```python\n    from typing import Annotated\n\n    from fastapi import Depends, FastAPI\n    from fastapi.security import OAuth2PasswordRequestForm\n\n    app = FastAPI()\n\n\n    @app.post(\"/login\")\n    def login(form_data: Annotated[OAuth2PasswordRequestForm, Depends()]):\n        data = {}\n        data[\"scopes\"] = []\n        for scope in form_data.scopes:\n            data[\"scopes\"].append(scope)\n        if form_data.client_id:\n            data[\"client_id\"] = form_data.client_id\n        if form_data.client_secret:\n            data[\"client_secret\"] = form_data.client_secret\n        return data\n    ```\n\n    Note that for OAuth2 the scope `items:read` i

{"status": "ok", "filepath": "fastapi/security/oauth2.py", "content": "                \"\"\"\n                A single string with actually several scopes separated by spaces. Each\n                scope is also a string.\n\n                For example, a single string with:\n\n                ```python\n                \"items:read items:write users:read profile openid\"\n                ````\n\n                would represent the scopes:\n\n                * `items:read`\n                * `items:write`\n                * `users:read`\n                * `profile`\n                * `openid`\n                \"\"\"\n            ),\n        ] = \"\",\n        client_id: Annotated[\n            Union[str, None],\n            Form(),\n            Doc(\n                \"\"\"\n                If there's a `client_id`, it can be sent as part of the form fields.\n                But the OAuth2 specification recommends sending the `client_id` and\n                `client_secret` (if any) using HTTP Basic auth.\n                \"\"\"\n            ),\n        ] = None,\n        client_secret: Annotated[\n            Union[str, None],\n            Form(json_schema_extra={\"format\": \"password\"}),\n            Doc(\n                \"\"\"\n                If there's a `client_password` (and a `client_id`), they can be sent\n                as part of the form fields. But the OAuth2 specification recommends\n                sending the `client_id` and `client_secret` (if any) using HTTP Basic\n                auth.\n                \"\"\"\n            ),\n        ] = None,\n    ):\n        self.grant_type = grant_type\n        self.username = username\n        self.password = password\n        self.scopes = scope.split()\n        self.client_id = client_id\n        self.client_secret = client_secret\n\n\nclass OAuth2PasswordRequestFormStrict(OAuth2PasswordRequestForm):\n    \"\"\"\n    This is a dependency class to collect the `username` and `password` as form data\n    fo

{"status": "ok", "filepath": "fastapi/security/oauth2.py", "content": "            username=username,\n            password=password,\n            scope=scope,\n            client_id=client_id,\n            client_secret=client_secret,\n        )\n\n\nclass OAuth2(SecurityBase):\n    \"\"\"\n    This is the base class for OAuth2 authentication, an instance of it would be used\n    as a dependency. All other OAuth2 classes inherit from it and customize it for\n    each OAuth2 flow.\n\n    You normally would not create a new class inheriting from it but use one of the\n    existing subclasses, and maybe compose them if you want to support multiple flows.\n\n    Read more about it in the\n    [FastAPI docs for Security](https://fastapi.tiangolo.com/tutorial/security/).\n    \"\"\"\n\n    def __init__(\n        self,\n        *,\n        flows: Annotated[\n            Union[OAuthFlowsModel, Dict[str, Dict[str, Any]]],\n            Doc(\n                \"\"\"\n                The dictionary of OAuth2 flows.\n                \"\"\"\n            ),\n        ] = OAuthFlowsModel(),\n        scheme_name: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                Security scheme name.\n\n                It will be included in the generated OpenAPI (e.g. visible at `/docs`).\n                \"\"\"\n            ),\n        ] = None,\n        description: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                Security scheme description.\n\n                It will be included in the generated OpenAPI (e.g. visible at `/docs`).\n                \"\"\"\n            ),\n        ] = None,\n        auto_error: Annotated[\n            bool,\n            Doc(\n                \"\"\"\n                By default, if no HTTP Authorization header is provided, required for\n                OAuth2 authentication, it will automatically cancel the request and\n                send the client an error.\n\n       

{"status": "ok", "filepath": "fastapi/security/oauth2.py", "content": "        description: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                Security scheme description.\n\n                It will be included in the generated OpenAPI (e.g. visible at `/docs`).\n                \"\"\"\n            ),\n        ] = None,\n        auto_error: Annotated[\n            bool,\n            Doc(\n                \"\"\"\n                By default, if no HTTP Authorization header is provided, required for\n                OAuth2 authentication, it will automatically cancel the request and\n                send the client an error.\n\n                If `auto_error` is set to `False`, when the HTTP Authorization header\n                is not available, instead of erroring out, the dependency result will\n                be `None`.\n\n                This is useful when you want to have optional authentication.\n\n                It is also useful when you want to have authentication that can be\n                provided in one of multiple optional ways (for example, with OAuth2\n                or in a cookie).\n                \"\"\"\n            ),\n        ] = True,\n        refreshUrl: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                The URL to refresh the token and obtain a new one.\n                \"\"\"\n            ),\n        ] = None,\n    ):\n        if not scopes:\n            scopes = {}\n        flows = OAuthFlowsModel(\n            password=cast(\n                Any,\n                {\n                    \"tokenUrl\": tokenUrl,\n                    \"refreshUrl\": refreshUrl,\n                    \"scopes\": scopes,\n                },\n            )\n", "start_line": 451, "end_line": 500, "total_lines": 666, "is_truncated": false}

{"status": "ok", "stdout": "{\n  \"OAuth2Admin\": {\n    \"type\": \"oauth2\",\n    \"flows\": {\n      \"password\": {\n        \"scopes\": {\n          \"admin\": \"Admin scope\"\n        },\n        \"tokenUrl\": \"token\"\n      }\n    }\n  },\n  \"OAuth2User\": {\n    \"type\": \"oauth2\",\n    \"flows\": {\n      \"password\": {\n        \"scopes\": {\n          \"user\": \"User scope\"\n        },\n        \"tokenUrl\": \"token\"\n      }\n    }\n  }\n}\n[\n  {\n    \"OAuth2Admin\": []\n  },\n  {\n    \"OAuth2User\": []\n  }\n]\n", "exit_code": 0}

{"status": "ok", "stdout": "{\n  \"OAuth2\": {\n    \"type\": \"oauth2\",\n    \"flows\": {\n      \"password\": {\n        \"scopes\": {\n          \"user\": \"User scope\"\n        },\n        \"tokenUrl\": \"token\"\n      }\n    }\n  }\n}\n[\n  {\n    \"OAuth2\": []\n  },\n  {\n    \"OAuth2\": []\n  }\n]\n", "exit_code": 0}

{"status": "ok", "stdout": "{\n  \"OAuth2PasswordBearer\": {\n    \"type\": \"oauth2\",\n    \"flows\": {\n      \"password\": {\n        \"scopes\": {\n          \"admin\": \"Admin scope\",\n          \"user\": \"User scope\"\n        },\n        \"tokenUrl\": \"token\"\n      }\n    }\n  }\n}\n[\n  {\n    \"OAuth2PasswordBearer\": [\n      \"admin\"\n    ]\n  }\n]\n[\n  {\n    \"OAuth2PasswordBearer\": [\n      \"user\"\n    ]\n  }\n]\n", "exit_code": 0}

{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "    \"2XX\": \"Success\",\n    \"3XX\": \"Redirection\",\n    \"4XX\": \"Client Error\",\n    \"5XX\": \"Server Error\",\n    \"DEFAULT\": \"Default Response\",\n}\n\n\ndef get_openapi_security_definitions(\n    flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n    security_definitions = {}\n    operation_security = []\n    for security_requirement in flat_dependant.security_requirements:\n        security_definition = jsonable_encoder(\n            security_requirement.security_scheme.model,\n            by_alias=True,\n            exclude_none=True,\n        )\n        security_name = security_requirement.security_scheme.scheme_name\n        security_definitions[security_name] = security_definition\n        operation_security.append({security_name: security_requirement.scopes})\n    return security_definitions, operation_security\n\n\ndef _get_openapi_operation_parameters(\n    *,\n    dependant: Dependant,\n    model_name_map: ModelNameMap,\n    field_mapping: Dict[\n        Tuple[ModelField, Literal[\"validation\", \"serialization\"]], JsonSchemaValue\n", "start_line": 70, "end_line": 100, "total_lines": 558, "is_truncated": false}

{"status": "ok", "filepath": "fastapi/openapi/utils.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/openapi/utils.py\n+++ b/fastapi/openapi/utils.py\n@@ -87,7 +87,8 @@\n             exclude_none=True,\n         )\n         security_name = security_requirement.security_scheme.scheme_name\n-        security_definitions[security_name] = security_definition\n+        if security_name not in security_definitions:\n+            security_definitions[security_name] = security_definition\n         operation_security.append({security_name: security_requirement.scopes})\n     return security_definitions, operation_security\n \n", "is_truncated": false}

{"status": "ok", "stdout": "{\n  \"OAuth2\": {\n    \"type\": \"oauth2\",\n    \"flows\": {\n      \"password\": {\n        \"scopes\": {\n          \"admin\": \"Admin scope\"\n        },\n        \"tokenUrl\": \"token\"\n      }\n    }\n  }\n}\n[\n  {\n    \"OAuth2\": []\n  },\n  {\n    \"OAuth2\": []\n  }\n]\n", "exit_code": 0}

{"status": "ok", "stdout": "{\n  \"OAuth2\": {\n    \"type\": \"oauth2\",\n    \"flows\": {\n      \"password\": {\n        \"scopes\": {\n          \"admin\": \"Admin scope\"\n        },\n        \"tokenUrl\": \"token\"\n      }\n    }\n  }\n}\n", "exit_code": 0}

{"status": "ok", "stdout": "", "exit_code": 0}

{"status": "ok", "stdout": "{\n  \"OAuth2\": {\n    \"type\": \"oauth2\",\n    \"flows\": {\n      \"password\": {\n        \"scopes\": {\n          \"admin\": \"Admin scope\"\n        },\n        \"tokenUrl\": \"token\"\n      }\n    }\n  }\n}\n", "exit_code": 0}

{"status": "ok", "filepath": "fastapi/openapi/utils.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/openapi/utils.py\n+++ b/fastapi/openapi/utils.py\n@@ -87,7 +87,29 @@\n             exclude_none=True,\n         )\n         security_name = security_requirement.security_scheme.scheme_name\n-        if security_name not in security_definitions:\n+        if security_name in security_definitions:\n+            # If it's an OAuth2 scheme, we should merge the scopes\n+            security_definition_existing = security_definitions[security_name]\n+            if (\n+                security_definition_existing.get(\"type\") == \"oauth2\"\n+                and security_definition.get(\"type\") == \"oauth2\"\n+            ):\n+                flows_existing = security_definition_existing.get(\"flows\", {})\n+                flows_new = security_definition.get(\"flows\", {})\n+                for flow_name, flow_details in flows_new.items():\n+                    if flow_name in flows_existing:\n+                        scopes_existing = flows_existing[flow_name].get(\"scopes\", {})\n+                        scopes_new = flow_details.get(\"scopes\", {})\n+                        flows_existing[flow_name][\"scopes\"] = {\n+                            **scopes_existing,\n+                            **scopes_new,\n+                        }\n+                    else:\n+                        flows_existing[flow_name] = flow_details\n+            else:\n+                # For non-OAuth2 schemes, we just keep the first one\n+                pass\n+        else:\n             security_definitions[security_name] = security_definition\n         operation_security.append({security_name: security_requirement.scopes})\n     return security_definitions, operation_security\n", "is_truncated": false}

{"status": "ok", "stdout": "{\n  \"OAuth2\": {\n    \"type\": \"oauth2\",\n    \"flows\": {\n      \"password\": {\n        \"scopes\": {\n          \"admin\": \"Admin scope\",\n          \"user\": \"User scope\"\n        },\n        \"tokenUrl\": \"token\"\n      }\n    }\n  }\n}\n", "exit_code": 0}

{"status": "ok", "patch_size": 1799, "files_changed": 1}