fastapi_13786

{"status": "ok", "stdout": "fastapi/security:\n__init__.py\napi_key.py\nbase.py\nhttp.py\noauth2.py\nopen_id_connect_url.py\nutils.py\n", "exit_code": 0}

{"status": "error", "error_type": "CommandError", "error_message": "Command failed with exit code 1", "details": {"stdout": "", "stderr": "", "exit_code": 1}}

{"status": "ok", "stdout": "fastapi/security/api_key.py:8:from starlette.status import HTTP_403_FORBIDDEN\nfastapi/security/api_key.py:18:                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\nfastapi/security/open_id_connect_url.py:8:from starlette.status import HTTP_403_FORBIDDEN\nfastapi/security/open_id_connect_url.py:81:                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\nfastapi/security/oauth2.py:11:from starlette.status import HTTP_401_UNAUTHORIZED, HTTP_403_FORBIDDEN\nfastapi/security/oauth2.py:385:                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\nfastapi/security/http.py:13:from starlette.status import HTTP_401_UNAUTHORIZED, HTTP_403_FORBIDDEN\nfastapi/security/http.py:91:                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\nfastapi/security/http.py:310:                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\nfastapi/security/http.py:317:                    status_code=HTTP_403_FORBIDDEN,\nfastapi/security/http.py:412:                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\nfastapi/security/http.py:419:                    status_code=HTTP_403_FORBIDDEN,\n", "exit_code": 0}

{"status": "ok", "filepath": "fastapi/security/api_key.py", "content": "from typing import Optional\n\nfrom annotated_doc import Doc\nfrom fastapi.openapi.models import APIKey, APIKeyIn\nfrom fastapi.security.base import SecurityBase\nfrom starlette.exceptions import HTTPException\nfrom starlette.requests import Request\nfrom starlette.status import HTTP_403_FORBIDDEN\nfrom typing_extensions import Annotated\n\n\nclass APIKeyBase(SecurityBase):\n    @staticmethod\n    def check_api_key(api_key: Optional[str], auto_error: bool) -> Optional[str]:\n        if not api_key:\n            if auto_error:\n                raise HTTPException(\n                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\n                )\n            return None\n        return api_key\n\n\nclass APIKeyQuery(APIKeyBase):\n    \"\"\"\n    API key authentication using a query parameter.\n\n    This defines the name of the query parameter that should be provided in the request\n    with the API key and integrates that into the OpenAPI documentation. It extracts\n    the key value sent in the query parameter automatically and provides it as the\n    dependency result. But it doesn't define how to send that API key to the client.\n\n    ## Usage\n\n    Create an instance object and use that object as the dependency in `Depends()`.\n\n    The dependency result will be a string containing the key value.\n\n    ## Example\n\n    ```python\n    from fastapi import Depends, FastAPI\n    from fastapi.security import APIKeyQuery\n\n    app = FastAPI()\n\n    query_scheme = APIKeyQuery(name=\"api_key\")\n\n\n    @app.get(\"/items/\")\n    async def read_items(api_key: str = Depends(query_scheme)):\n        return {\"api_key\": api_key}\n    ```\n    \"\"\"\n\n    def __init__(\n        self,\n        *,\n        name: Annotated[\n            str,\n            Doc(\"Query parameter name.\"),\n        ],\n        scheme_name: Annotated[\n            Optional[str],\n            Doc(\n  

{"status": "ok", "filepath": "fastapi/security/http.py", "content": "import binascii\nfrom base64 import b64decode\nfrom typing import Optional\n\nfrom annotated_doc import Doc\nfrom fastapi.exceptions import HTTPException\nfrom fastapi.openapi.models import HTTPBase as HTTPBaseModel\nfrom fastapi.openapi.models import HTTPBearer as HTTPBearerModel\nfrom fastapi.security.base import SecurityBase\nfrom fastapi.security.utils import get_authorization_scheme_param\nfrom pydantic import BaseModel\nfrom starlette.requests import Request\nfrom starlette.status import HTTP_401_UNAUTHORIZED, HTTP_403_FORBIDDEN\nfrom typing_extensions import Annotated\n\n\nclass HTTPBasicCredentials(BaseModel):\n    \"\"\"\n    The HTTP Basic credentials given as the result of using `HTTPBasic` in a\n    dependency.\n\n    Read more about it in the\n    [FastAPI docs for HTTP Basic Auth](https://fastapi.tiangolo.com/advanced/security/http-basic-auth/).\n    \"\"\"\n\n    username: Annotated[str, Doc(\"The HTTP Basic username.\")]\n    password: Annotated[str, Doc(\"The HTTP Basic password.\")]\n\n\nclass HTTPAuthorizationCredentials(BaseModel):\n    \"\"\"\n    The HTTP authorization credentials in the result of using `HTTPBearer` or\n    `HTTPDigest` in a dependency.\n\n    The HTTP authorization header value is split by the first space.\n\n    The first part is the `scheme`, the second part is the `credentials`.\n\n    For example, in an HTTP Bearer token scheme, the client will send a header\n    like:\n\n    ```\n    Authorization: Bearer deadbeef12346\n    ```\n\n    In this case:\n\n    * `scheme` will have the value `\"Bearer\"`\n    * `credentials` will have the value `\"deadbeef12346\"`\n    \"\"\"\n\n    scheme: Annotated[\n        str,\n        Doc(\n            \"\"\"\n            The HTTP authorization scheme extracted from the header value.\n            \"\"\"\n        ),\n    ]\n    credentials: Annotated[\n        str,\n        Doc(\n            \"\"\"\n            The HTTP a

{"status": "ok", "filepath": "fastapi/security/http.py", "content": "    credentials: Annotated[\n        str,\n        Doc(\n            \"\"\"\n            The HTTP authorization credentials extracted from the header value.\n            \"\"\"\n        ),\n    ]\n\n\nclass HTTPBase(SecurityBase):\n    def __init__(\n        self,\n        *,\n        scheme: str,\n        scheme_name: Optional[str] = None,\n        description: Optional[str] = None,\n        auto_error: bool = True,\n    ):\n        self.model = HTTPBaseModel(scheme=scheme, description=description)\n        self.scheme_name = scheme_name or self.__class__.__name__\n        self.auto_error = auto_error\n\n    async def __call__(\n        self, request: Request\n    ) -> Optional[HTTPAuthorizationCredentials]:\n        authorization = request.headers.get(\"Authorization\")\n        scheme, credentials = get_authorization_scheme_param(authorization)\n        if not (authorization and scheme and credentials):\n            if self.auto_error:\n                raise HTTPException(\n                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\n                )\n            else:\n                return None\n        return HTTPAuthorizationCredentials(scheme=scheme, credentials=credentials)\n\n\nclass HTTPBasic(HTTPBase):\n    \"\"\"\n    HTTP Basic authentication.\n", "start_line": 60, "end_line": 100, "total_lines": 424, "is_truncated": false}

{"status": "ok", "filepath": "fastapi/security/http.py", "content": "                    status_code=HTTP_401_UNAUTHORIZED,\n                    detail=\"Not authenticated\",\n                    headers=unauthorized_headers,\n                )\n            else:\n                return None\n        invalid_user_credentials_exc = HTTPException(\n            status_code=HTTP_401_UNAUTHORIZED,\n            detail=\"Invalid authentication credentials\",\n            headers=unauthorized_headers,\n        )\n        try:\n            data = b64decode(param).decode(\"ascii\")\n        except (ValueError, UnicodeDecodeError, binascii.Error):\n            raise invalid_user_credentials_exc  # noqa: B904\n        username, separator, password = data.partition(\":\")\n        if not separator:\n            raise invalid_user_credentials_exc\n        return HTTPBasicCredentials(username=username, password=password)\n\n\nclass HTTPBearer(HTTPBase):\n    \"\"\"\n    HTTP Bearer token authentication.\n\n    ## Usage\n\n    Create an instance object and use that object as the dependency in `Depends()`.\n\n    The dependency result will be an `HTTPAuthorizationCredentials` object containing\n    the `scheme` and the `credentials`.\n\n    ## Example\n\n    ```python\n    from typing import Annotated\n\n    from fastapi import Depends, FastAPI\n    from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer\n\n    app = FastAPI()\n\n    security = HTTPBearer()\n\n\n    @app.get(\"/users/me\")\n    def read_current_user(\n        credentials: Annotated[HTTPAuthorizationCredentials, Depends(security)]\n    ):\n        return {\"scheme\": credentials.scheme, \"credentials\": credentials.credentials}\n    ```\n    \"\"\"\n\n    def __init__(\n        self,\n        *,\n        bearerFormat: Annotated[Optional[str], Doc(\"Bearer token format.\")] = None,\n        scheme_name: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                Secu

{"status": "ok", "filepath": "fastapi/security/http.py", "content": "\n    async def __call__(\n        self, request: Request\n    ) -> Optional[HTTPAuthorizationCredentials]:\n        authorization = request.headers.get(\"Authorization\")\n        scheme, credentials = get_authorization_scheme_param(authorization)\n        if not (authorization and scheme and credentials):\n            if self.auto_error:\n                raise HTTPException(\n                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\n                )\n            else:\n                return None\n        if scheme.lower() != \"bearer\":\n            if self.auto_error:\n                raise HTTPException(\n                    status_code=HTTP_403_FORBIDDEN,\n                    detail=\"Invalid authentication credentials\",\n                )\n            else:\n                return None\n        return HTTPAuthorizationCredentials(scheme=scheme, credentials=credentials)\n\n\nclass HTTPDigest(HTTPBase):\n    \"\"\"\n    HTTP Digest authentication.\n\n    ## Usage\n\n    Create an instance object and use that object as the dependency in `Depends()`.\n\n    The dependency result will be an `HTTPAuthorizationCredentials` object containing\n    the `scheme` and the `credentials`.\n\n    ## Example\n\n    ```python\n    from typing import Annotated\n\n    from fastapi import Depends, FastAPI\n    from fastapi.security import HTTPAuthorizationCredentials, HTTPDigest\n\n    app = FastAPI()\n\n    security = HTTPDigest()\n\n\n    @app.get(\"/users/me\")\n    def read_current_user(\n        credentials: Annotated[HTTPAuthorizationCredentials, Depends(security)]\n    ):\n        return {\"scheme\": credentials.scheme, \"credentials\": credentials.credentials}\n    ```\n    \"\"\"\n\n    def __init__(\n        self,\n        *,\n        scheme_name: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                Security scheme name.\n\n        

{"status": "ok", "filepath": "fastapi/security/open_id_connect_url.py", "content": "from typing import Optional\n\nfrom annotated_doc import Doc\nfrom fastapi.openapi.models import OpenIdConnect as OpenIdConnectModel\nfrom fastapi.security.base import SecurityBase\nfrom starlette.exceptions import HTTPException\nfrom starlette.requests import Request\nfrom starlette.status import HTTP_403_FORBIDDEN\nfrom typing_extensions import Annotated\n\n\nclass OpenIdConnect(SecurityBase):\n    \"\"\"\n    OpenID Connect authentication class. An instance of it would be used as a\n    dependency.\n    \"\"\"\n\n    def __init__(\n        self,\n        *,\n        openIdConnectUrl: Annotated[\n            str,\n            Doc(\n                \"\"\"\n            The OpenID Connect URL.\n            \"\"\"\n            ),\n        ],\n        scheme_name: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                Security scheme name.\n\n                It will be included in the generated OpenAPI (e.g. visible at `/docs`).\n                \"\"\"\n            ),\n        ] = None,\n        description: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                Security scheme description.\n\n                It will be included in the generated OpenAPI (e.g. visible at `/docs`).\n                \"\"\"\n            ),\n        ] = None,\n        auto_error: Annotated[\n            bool,\n            Doc(\n                \"\"\"\n                By default, if no HTTP Authorization header is provided, required for\n                OpenID Connect authentication, it will automatically cancel the request\n                and send the client an error.\n\n                If `auto_error` is set to `False`, when the HTTP Authorization header\n                is not available, instead of erroring out, the dependency result will\n                be `None`.\n\n                This is useful when you want to have

{"status": "ok", "filepath": "fastapi/security/oauth2.py", "content": "from typing import Any, Dict, List, Optional, Union, cast\n\nfrom annotated_doc import Doc\nfrom fastapi.exceptions import HTTPException\nfrom fastapi.openapi.models import OAuth2 as OAuth2Model\nfrom fastapi.openapi.models import OAuthFlows as OAuthFlowsModel\nfrom fastapi.param_functions import Form\nfrom fastapi.security.base import SecurityBase\nfrom fastapi.security.utils import get_authorization_scheme_param\nfrom starlette.requests import Request\nfrom starlette.status import HTTP_401_UNAUTHORIZED, HTTP_403_FORBIDDEN\n\n# TODO: import from typing when deprecating Python 3.9\nfrom typing_extensions import Annotated\n\n\nclass OAuth2PasswordRequestForm:\n    \"\"\"\n    This is a dependency class to collect the `username` and `password` as form data\n    for an OAuth2 password flow.\n\n    The OAuth2 specification dictates that for a password flow the data should be\n    collected using form data (instead of JSON) and that it should have the specific\n    fields `username` and `password`.\n\n    All the initialization parameters are extracted from the request.\n\n    Read more about it in the\n    [FastAPI docs for Simple OAuth2 with Password and Bearer](https://fastapi.tiangolo.com/tutorial/security/simple-oauth2/).\n\n    ## Example\n\n    ```python\n    from typing import Annotated\n\n    from fastapi import Depends, FastAPI\n    from fastapi.security import OAuth2PasswordRequestForm\n\n    app = FastAPI()\n\n\n    @app.post(\"/login\")\n    def login(form_data: Annotated[OAuth2PasswordRequestForm, Depends()]):\n        data = {}\n        data[\"scopes\"] = []\n        for scope in form_data.scopes:\n            data[\"scopes\"].append(scope)\n        if form_data.client_id:\n            data[\"client_id\"] = form_data.client_id\n        if form_data.client_secret:\n            data[\"client_secret\"] = form_data.client_secret\n        return data\n    ```\n\n    Note that for OAuth2 the 

{"status": "ok", "filepath": "fastapi/security/oauth2.py", "content": "                \"\"\"\n            ),\n        ] = None,\n        auto_error: Annotated[\n            bool,\n            Doc(\n                \"\"\"\n                By default, if no HTTP Authorization header is provided, required for\n                OAuth2 authentication, it will automatically cancel the request and\n                send the client an error.\n\n                If `auto_error` is set to `False`, when the HTTP Authorization header\n                is not available, instead of erroring out, the dependency result will\n                be `None`.\n\n                This is useful when you want to have optional authentication.\n\n                It is also useful when you want to have authentication that can be\n                provided in one of multiple optional ways (for example, with OAuth2\n                or in a cookie).\n                \"\"\"\n            ),\n        ] = True,\n    ):\n        self.model = OAuth2Model(\n            flows=cast(OAuthFlowsModel, flows), description=description\n        )\n        self.scheme_name = scheme_name or self.__class__.__name__\n        self.auto_error = auto_error\n\n    async def __call__(self, request: Request) -> Optional[str]:\n        authorization = request.headers.get(\"Authorization\")\n        if not authorization:\n            if self.auto_error:\n                raise HTTPException(\n                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\n                )\n            else:\n                return None\n        return authorization\n\n\nclass OAuth2PasswordBearer(OAuth2):\n    \"\"\"\n    OAuth2 flow for authentication using a bearer token obtained with a password.\n    An instance of it would be used as a dependency.\n\n    Read more about it in the\n    [FastAPI docs for Simple OAuth2 with Password and Bearer](https://fastapi.tiangolo.com/tutorial/security/simple-oauth2/).\n    \"\"\"\n\n", "

{"status": "ok", "filepath": "fastapi/security/base.py", "content": "from fastapi.openapi.models import SecurityBase as SecurityBaseModel\n\n\nclass SecurityBase:\n    model: SecurityBaseModel\n    scheme_name: str\n", "start_line": 1, "end_line": 6, "total_lines": 6, "is_truncated": false}

{"status": "ok", "filepath": "fastapi/security/api_key.py", "content": "from typing import Optional\n\nfrom annotated_doc import Doc\nfrom fastapi.openapi.models import APIKey, APIKeyIn\nfrom fastapi.security.base import SecurityBase\nfrom starlette.exceptions import HTTPException\nfrom starlette.requests import Request\nfrom starlette.status import HTTP_403_FORBIDDEN\nfrom typing_extensions import Annotated\n\n\nclass APIKeyBase(SecurityBase):\n    @staticmethod\n    def check_api_key(api_key: Optional[str], auto_error: bool) -> Optional[str]:\n        if not api_key:\n            if auto_error:\n                raise HTTPException(\n                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\n                )\n            return None\n        return api_key\n\n\nclass APIKeyQuery(APIKeyBase):\n    \"\"\"\n    API key authentication using a query parameter.\n\n    This defines the name of the query parameter that should be provided in the request\n    with the API key and integrates that into the OpenAPI documentation. It extracts\n    the key value sent in the query parameter automatically and provides it as the\n    dependency result. But it doesn't define how to send that API key to the client.\n\n    ## Usage\n\n    Create an instance object and use that object as the dependency in `Depends()`.\n\n    The dependency result will be a string containing the key value.\n\n    ## Example\n\n    ```python\n    from fastapi import Depends, FastAPI\n    from fastapi.security import APIKeyQuery\n\n    app = FastAPI()\n\n    query_scheme = APIKeyQuery(name=\"api_key\")\n\n\n    @app.get(\"/items/\")\n    async def read_items(api_key: str = Depends(query_scheme)):\n        return {\"api_key\": api_key}\n    ```\n    \"\"\"\n\n    def __init__(\n        self,\n        *,\n        name: Annotated[\n            str,\n            Doc(\"Query parameter name.\"),\n        ],\n        scheme_name: Annotated[\n            Optional[str],\n            Doc(\n  

{"status": "ok", "filepath": "fastapi/security/api_key.py", "content": "        name: Annotated[str, Doc(\"Header name.\")],\n        scheme_name: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                Security scheme name.\n\n                It will be included in the generated OpenAPI (e.g. visible at `/docs`).\n                \"\"\"\n            ),\n        ] = None,\n        description: Annotated[\n            Optional[str],\n            Doc(\n                \"\"\"\n                Security scheme description.\n\n                It will be included in the generated OpenAPI (e.g. visible at `/docs`).\n                \"\"\"\n            ),\n        ] = None,\n        auto_error: Annotated[\n            bool,\n            Doc(\n                \"\"\"\n                By default, if the header is not provided, `APIKeyHeader` will\n                automatically cancel the request and send the client an error.\n\n                If `auto_error` is set to `False`, when the header is not available,\n                instead of erroring out, the dependency result will be `None`.\n\n                This is useful when you want to have optional authentication.\n\n                It is also useful when you want to have authentication that can be\n                provided in one of multiple optional ways (for example, in a header or\n                in an HTTP Bearer token).\n                \"\"\"\n            ),\n        ] = True,\n    ):\n        self.model: APIKey = APIKey(\n            **{\"in\": APIKeyIn.header},\n            name=name,\n            description=description,\n        )\n        self.scheme_name = scheme_name or self.__class__.__name__\n        self.auto_error = auto_error\n\n    async def __call__(self, request: Request) -> Optional[str]:\n        api_key = request.headers.get(self.model.name)\n        return self.check_api_key(api_key, self.auto_error)\n\n\nclass APIKeyCookie(APIKeyBase):\n    \"\"\"\n    A

{"status": "ok", "stdout": "fastapi/security/oauth2.py:11:from starlette.status import HTTP_401_UNAUTHORIZED, HTTP_403_FORBIDDEN\nfastapi/security/oauth2.py:495:                    status_code=HTTP_401_UNAUTHORIZED,\nfastapi/security/oauth2.py:605:                    status_code=HTTP_401_UNAUTHORIZED,\nfastapi/security/http.py:13:from starlette.status import HTTP_401_UNAUTHORIZED, HTTP_403_FORBIDDEN\nfastapi/security/http.py:200:                    status_code=HTTP_401_UNAUTHORIZED,\nfastapi/security/http.py:207:            status_code=HTTP_401_UNAUTHORIZED,\n", "exit_code": 0}

{"status": "ok", "filepath": "fastapi/security/api_key.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/security/api_key.py\n+++ b/fastapi/security/api_key.py\n@@ -5,7 +5,7 @@\n from fastapi.security.base import SecurityBase\n from starlette.exceptions import HTTPException\n from starlette.requests import Request\n-from starlette.status import HTTP_403_FORBIDDEN\n+from starlette.status import HTTP_401_UNAUTHORIZED, HTTP_403_FORBIDDEN\n from typing_extensions import Annotated\n \n \n", "is_truncated": false}

{"status": "ok", "filepath": "fastapi/security/api_key.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/security/api_key.py\n+++ b/fastapi/security/api_key.py\n@@ -11,11 +11,15 @@\n \n class APIKeyBase(SecurityBase):\n     @staticmethod\n-    def check_api_key(api_key: Optional[str], auto_error: bool) -> Optional[str]:\n+    def check_api_key(\n+        api_key: Optional[str], \n+        auto_error: bool, \n+        not_authenticated_status_code: int = HTTP_401_UNAUTHORIZED\n+    ) -> Optional[str]:\n         if not api_key:\n             if auto_error:\n                 raise HTTPException(\n-                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\n+                    status_code=not_authenticated_status_code, detail=\"Not authenticated\"\n                 )\n             return None\n         return api_key\n", "is_truncated": false}

{"status": "ok", "filepath": "fastapi/security/api_key.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/security/api_key.py\n+++ b/fastapi/security/api_key.py\n@@ -103,6 +103,10 @@\n                 \"\"\"\n             ),\n         ] = True,\n+        not_authenticated_status_code: Annotated[\n+            int,\n+            Doc(\"Status code to use when not authenticated.\"),\n+        ] = HTTP_401_UNAUTHORIZED,\n     ):\n         self.model: APIKey = APIKey(\n             **{\"in\": APIKeyIn.query},\n@@ -111,10 +115,13 @@\n         )\n         self.scheme_name = scheme_name or self.__class__.__name__\n         self.auto_error = auto_error\n+        self.not_authenticated_status_code = not_authenticated_status_code\n \n     async def __call__(self, request: Request) -> Optional[str]:\n         api_key = request.query_params.get(self.model.name)\n-        return self.check_api_key(api_key, self.auto_error)\n+        return self.check_api_key(\n+            api_key, self.auto_error, self.not_authenticated_status_code\n+        )\n \n \n class APIKeyHeader(APIKeyBase):\n", "is_truncated": false}

{"status": "ok", "filepath": "fastapi/security/api_key.py", "occurrences": 1, "strategy": "regex", "diff": "--- a/fastapi/security/api_key.py\n+++ b/fastapi/security/api_key.py\n@@ -156,7 +156,7 @@\n     ```\n     \"\"\"\n \n-    def __init__(\n+        def __init__(\n         self,\n         *,\n         name: Annotated[str, Doc(\"Header name.\")],\n@@ -187,17 +187,22 @@\n                 By default, if the header is not provided, `APIKeyHeader` will\n                 automatically cancel the request and send the client an error.\n \n-                If `auto_error` is set to `False`, when the header is not available,\n-                instead of erroring out, the dependency result will be `None`.\n+                If `auto_error` is set to `False`, when the header is not\n+                available, instead of erroring out, the dependency result will be\n+                `None`.\n \n                 This is useful when you want to have optional authentication.\n \n                 It is also useful when you want to have authentication that can be\n-                provided in one of multiple optional ways (for example, in a header or\n-                in an HTTP Bearer token).\n+                provided in one of multiple optional ways (for example, in a header\n+                or in an HTTP Bearer token).\n                 \"\"\"\n             ),\n         ] = True,\n+        not_authenticated_status_code: Annotated[\n+            int,\n+            Doc(\"Status code to use when not authenticated.\"),\n+        ] = HTTP_401_UNAUTHORIZED,\n     ):\n         self.model: APIKey = APIKey(\n             **{\"in\": APIKeyIn.header},\n@@ -206,10 +211,13 @@\n         )\n         self.scheme_name = scheme_name or self.__class__.__name__\n         self.auto_error = auto_error\n+        self.not_authenticated_status_code = not_authenticated_status_code\n \n     async def __call__(self, request: Request) -> Optional[str]:\n         api_key = request.headers.get(self.model.n

{"status": "ok", "filepath": "fastapi/security/api_key.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/security/api_key.py\n+++ b/fastapi/security/api_key.py\n@@ -294,6 +294,10 @@\n                 \"\"\"\n             ),\n         ] = True,\n+        not_authenticated_status_code: Annotated[\n+            int,\n+            Doc(\"Status code to use when not authenticated.\"),\n+        ] = HTTP_401_UNAUTHORIZED,\n     ):\n         self.model: APIKey = APIKey(\n             **{\"in\": APIKeyIn.cookie},\n@@ -302,7 +306,10 @@\n         )\n         self.scheme_name = scheme_name or self.__class__.__name__\n         self.auto_error = auto_error\n+        self.not_authenticated_status_code = not_authenticated_status_code\n \n     async def __call__(self, request: Request) -> Optional[str]:\n         api_key = request.cookies.get(self.model.name)\n-        return self.check_api_key(api_key, self.auto_error)\n+        return self.check_api_key(\n+            api_key, self.auto_error, self.not_authenticated_status_code\n+        )\n", "is_truncated": false}

{"status": "ok", "filepath": "fastapi/security/http.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/security/http.py\n+++ b/fastapi/security/http.py\n@@ -75,10 +75,12 @@\n         scheme_name: Optional[str] = None,\n         description: Optional[str] = None,\n         auto_error: bool = True,\n+        not_authenticated_status_code: int = HTTP_401_UNAUTHORIZED,\n     ):\n         self.model = HTTPBaseModel(scheme=scheme, description=description)\n         self.scheme_name = scheme_name or self.__class__.__name__\n         self.auto_error = auto_error\n+        self.not_authenticated_status_code = not_authenticated_status_code\n \n     async def __call__(\n         self, request: Request\n@@ -88,7 +90,7 @@\n         if not (authorization and scheme and credentials):\n             if self.auto_error:\n                 raise HTTPException(\n-                    status_code=HTTP_403_FORBIDDEN, detail=\"Not authenticated\"\n+                    status_code=self.not_authenticated_status_code, detail=\"Not authenticated\"\n                 )\n             else:\n                 return None\n", "is_truncated": false}

{"status": "error", "error_type": "FileEditError", "error_message": "old_string matched 2 occurrences; provide more context or set allow_multiple"}

{"status": "error", "error_type": "FileEditError", "error_message": "old_string matched 2 occurrences; provide more context or set allow_multiple"}