failed WRONG_FIX wrong_fix · 18 tool calls · 134 s · fastapi/fastapi
🐛 Fix hierarchical security scope propagation see defect #5623
| # | Tool | Arguments | Result |
|---|---|---|---|
| 1 | run_command | {
"command": "grep -rn \"security\" fastapi/openapi/utils.py"
} | {"status": "ok", "stdout": "78:def get_openapi_security_definitions(\n81: security_definitions = {}\n82: operation_security = []\n83: for security_requirement ifull{"status": "ok", "stdout": "78:def get_openapi_security_definitions(\n81: security_definitions = {}\n82: operation_security = []\n83: for security_requirement in flat_dependant.security_requirements:\n84: security_definition = jsonable_encoder(\n85: security_requirement.security_scheme.model,\n89: security_name = security_requirement.security_scheme.scheme_name\n90: security_definitions[security_name] = security_definition\n91: operation_security.append({security_name: security_requirement.scopes})\n92: return security_definitions, operation_security\n261: security_schemes: Dict[str, Any] = {}\n277: security_definitions, operation_security = get_openapi_security_definitions(\n280: if operation_security:\n281: operation.setdefault(\"security\", []).extend(operation_security)\n282: if security_definitions:\n283: security_schemes.update(security_definitions)\n319: cb_security_schemes,\n433: return path, security_schemes, definitions\n519: path, security_schemes, path_definitions = result\n522: if security_schemes:\n523: components.setdefault(\"securitySchemes\", {}).update(\n524: security_schemes\n538: path, security_schemes, path_definitions = result\n541: if security_schemes:\n542: components.setdefault(\"securitySchemes\", {}).update(\n543: security_schemes\n", "exit_code": 0} |
| 2 | read_file | {
"filepath": "fastapi/openapi/utils.py",
"start_line": 78,
"end_line": 92
} | {"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_security_definitions(\n flat_dependant: Dependant,\n) -> Tuple[Dict[str, Anfull{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_security_definitions(\n flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n security_definitions = {}\n operation_security = []\n for security_requirement in flat_dependant.security_requirements:\n security_definition = jsonable_encoder(\n security_requirement.security_scheme.model,\n by_alias=True,\n exclude_none=True,\n )\n security_name = security_requirement.security_scheme.scheme_name\n security_definitions[security_name] = security_definition\n operation_security.append({security_name: security_requirement.scopes})\n return security_definitions, operation_security\n", "start_line": 78, "end_line": 92, "total_lines": 558, "is_truncated": false} |
| 3 | run_command | {
"command": "grep -rn \"security_requirements\" fastapi/ | head -20"
} | {"status": "ok", "stdout": "fastapi/dependencies/models.py:32: security_requirements: List[SecurityRequirement] = field(default_factory=list)\nfastapi/dependencfull{"status": "ok", "stdout": "fastapi/dependencies/models.py:32: security_requirements: List[SecurityRequirement] = field(default_factory=list)\nfastapi/dependencies/utils.py:156: security_requirements=dependant.security_requirements.copy(),\nfastapi/dependencies/utils.py:171: flat_dependant.security_requirements.extend(flat_sub.security_requirements)\nfastapi/dependencies/utils.py:257: dependant.security_requirements.append(security_requirement)\nfastapi/openapi/utils.py:83: for security_requirement in flat_dependant.security_requirements:\n", "exit_code": 0} |
| 4 | read_file | {
"end_line": 180,
"filepath": "fastapi/dependencies/utils.py",
"start_line": 140
} | {"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": "def get_flat_dependant(\n dependant: Dependant,\n *,\n skip_repeats: bool = False,\n vfull{"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": "def get_flat_dependant(\n dependant: Dependant,\n *,\n skip_repeats: bool = False,\n visited: Optional[List[DependencyCacheKey]] = None,\n) -> Dependant:\n if visited is None:\n visited = []\n visited.append(dependant.cache_key)\n\n flat_dependant = Dependant(\n path_params=dependant.path_params.copy(),\n query_params=dependant.query_params.copy(),\n header_params=dependant.header_params.copy(),\n cookie_params=dependant.cookie_params.copy(),\n body_params=dependant.body_params.copy(),\n security_requirements=dependant.security_requirements.copy(),\n use_cache=dependant.use_cache,\n path=dependant.path,\n )\n for sub_dependant in dependant.dependencies:\n if skip_repeats and sub_dependant.cache_key in visited:\n continue\n flat_sub = get_flat_dependant(\n sub_dependant, skip_repeats=skip_repeats, visited=visited\n )\n flat_dependant.path_params.extend(flat_sub.path_params)\n flat_dependant.query_params.extend(flat_sub.query_params)\n flat_dependant.header_params.extend(flat_sub.header_params)\n flat_dependant.cookie_params.extend(flat_sub.cookie_params)\n flat_dependant.body_params.extend(flat_sub.body_params)\n flat_dependant.security_requirements.extend(flat_sub.security_requirements)\n return flat_dependant\n\n\ndef _get_flat_fields_from_params(fields: List[ModelField]) -> List[ModelField]:\n if not fields:\n return fields\n first_field = fields[0]\n if len(fields) == 1 and _is_model_class(first_field.type_):\n fields_to_extract = get_cached_model_fields(first_field.type_)\n", "start_line": 140, "end_line": 180, "total_lines": 1024, "is_truncated": false} |
| 5 | run_command | {
"command": "grep -rn \"SecurityRequirement\" fastapi/dependencies/models.py"
} | {"status": "ok", "stdout": "19:class SecurityRequirement:\n32: security_requirements: List[SecurityRequirement] = field(default_factory=list)\n", "exit_code": 0full{"status": "ok", "stdout": "19:class SecurityRequirement:\n32: security_requirements: List[SecurityRequirement] = field(default_factory=list)\n", "exit_code": 0} |
| 6 | read_file | {
"end_line": 30,
"filepath": "fastapi/dependencies/models.py",
"start_line": 10
} | {"status": "ok", "filepath": "fastapi/dependencies/models.py", "content": "from typing_extensions import Literal\n\nif sys.version_info >= (3, 13): # pragma: nofull{"status": "ok", "filepath": "fastapi/dependencies/models.py", "content": "from typing_extensions import Literal\n\nif sys.version_info >= (3, 13): # pragma: no cover\n from inspect import iscoroutinefunction\nelse: # pragma: no cover\n from asyncio import iscoroutinefunction\n\n\n@dataclass\nclass SecurityRequirement:\n security_scheme: SecurityBase\n scopes: Optional[Sequence[str]] = None\n\n\n@dataclass\nclass Dependant:\n path_params: List[ModelField] = field(default_factory=list)\n query_params: List[ModelField] = field(default_factory=list)\n header_params: List[ModelField] = field(default_factory=list)\n cookie_params: List[ModelField] = field(default_factory=list)\n body_params: List[ModelField] = field(default_factory=list)\n", "start_line": 10, "end_line": 30, "total_lines": 83, "is_truncated": false} |
| 7 | run_command | {
"command": "grep -rn \"SecurityRequirement\" fastapi/dependencies/utils.py | head -20"
} | {"status": "ok", "stdout": "57:from fastapi.dependencies.models import Dependant, SecurityRequirement\n254: security_requirement = SecurityRequirement(\n", "exifull{"status": "ok", "stdout": "57:from fastapi.dependencies.models import Dependant, SecurityRequirement\n254: security_requirement = SecurityRequirement(\n", "exit_code": 0} |
| 8 | read_file | {
"end_line": 265,
"filepath": "fastapi/dependencies/utils.py",
"start_line": 240
} | {"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": " call=call,\n name=name,\n path=path,\n security_scopes=security_scopes,\n use_cache=ufull{"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": " call=call,\n name=name,\n path=path,\n security_scopes=security_scopes,\n use_cache=use_cache,\n scope=scope,\n )\n path_param_names = get_path_param_names(path)\n endpoint_signature = get_typed_signature(call)\n signature_params = endpoint_signature.parameters\n if isinstance(call, SecurityBase):\n use_scopes: List[str] = []\n if isinstance(call, (OAuth2, OpenIdConnect)):\n use_scopes = security_scopes or use_scopes\n security_requirement = SecurityRequirement(\n security_scheme=call, scopes=use_scopes\n )\n dependant.security_requirements.append(security_requirement)\n for param_name, param in signature_params.items():\n is_path_param = param_name in path_param_names\n param_details = analyze_param(\n param_name=param_name,\n annotation=param.annotation,\n value=param.default,\n is_path_param=is_path_param,\n )\n", "start_line": 240, "end_line": 265, "total_lines": 1024, "is_truncated": false} |
| 9 | run_command | {
"command": "grep -rn \"SecurityRequirement\" fastapi/security/ | head -20"
} | {"status": "ok", "stdout": "", "exit_code": 0}full{"status": "ok", "stdout": "", "exit_code": 0} |
| 10 | run_command | {
"command": "grep -rn \"security_requirements\" fastapi/openapi/utils.py | head -20"
} | {"status": "ok", "stdout": "83: for security_requirement in flat_dependant.security_requirements:\n", "exit_code": 0}full{"status": "ok", "stdout": "83: for security_requirement in flat_dependant.security_requirements:\n", "exit_code": 0} |
| 11 | read_file | {
"end_line": 100,
"filepath": "fastapi/openapi/utils.py",
"start_line": 70
} | {"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": " \"2XX\": \"Success\",\n \"3XX\": \"Redirection\",\n \"4XX\": \"Client Error\",\n \"5XX\": full{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": " \"2XX\": \"Success\",\n \"3XX\": \"Redirection\",\n \"4XX\": \"Client Error\",\n \"5XX\": \"Server Error\",\n \"DEFAULT\": \"Default Response\",\n}\n\n\ndef get_openapi_security_definitions(\n flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n security_definitions = {}\n operation_security = []\n for security_requirement in flat_dependant.security_requirements:\n security_definition = jsonable_encoder(\n security_requirement.security_scheme.model,\n by_alias=True,\n exclude_none=True,\n )\n security_name = security_requirement.security_scheme.scheme_name\n security_definitions[security_name] = security_definition\n operation_security.append({security_name: security_requirement.scopes})\n return security_definitions, operation_security\n\n\ndef _get_openapi_operation_parameters(\n *,\n dependant: Dependant,\n model_name_map: ModelNameMap,\n field_mapping: Dict[\n Tuple[ModelField, Literal[\"validation\", \"serialization\"]], JsonSchemaValue\n", "start_line": 70, "end_line": 100, "total_lines": 558, "is_truncated": false} |
| 12 | run_command | {
"command": "grep -rn \"security_requirements\" fastapi/dependencies/utils.py | head -20"
} | {"status": "ok", "stdout": "156: security_requirements=dependant.security_requirements.copy(),\n171: flat_dependant.security_requirements.extend(flat_sub.securifull{"status": "ok", "stdout": "156: security_requirements=dependant.security_requirements.copy(),\n171: flat_dependant.security_requirements.extend(flat_sub.security_requirements)\n257: dependant.security_requirements.append(security_requirement)\n", "exit_code": 0} |
| 13 | read_file | {
"end_line": 180,
"filepath": "fastapi/dependencies/utils.py",
"start_line": 140
} | {"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": "def get_flat_dependant(\n dependant: Dependant,\n *,\n skip_repeats: bool = False,\n vfull{"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": "def get_flat_dependant(\n dependant: Dependant,\n *,\n skip_repeats: bool = False,\n visited: Optional[List[DependencyCacheKey]] = None,\n) -> Dependant:\n if visited is None:\n visited = []\n visited.append(dependant.cache_key)\n\n flat_dependant = Dependant(\n path_params=dependant.path_params.copy(),\n query_params=dependant.query_params.copy(),\n header_params=dependant.header_params.copy(),\n cookie_params=dependant.cookie_params.copy(),\n body_params=dependant.body_params.copy(),\n security_requirements=dependant.security_requirements.copy(),\n use_cache=dependant.use_cache,\n path=dependant.path,\n )\n for sub_dependant in dependant.dependencies:\n if skip_repeats and sub_dependant.cache_key in visited:\n continue\n flat_sub = get_flat_dependant(\n sub_dependant, skip_repeats=skip_repeats, visited=visited\n )\n flat_dependant.path_params.extend(flat_sub.path_params)\n flat_dependant.query_params.extend(flat_sub.query_params)\n flat_dependant.header_params.extend(flat_sub.header_params)\n flat_dependant.cookie_params.extend(flat_sub.cookie_params)\n flat_dependant.body_params.extend(flat_sub.body_params)\n flat_dependant.security_requirements.extend(flat_sub.security_requirements)\n return flat_dependant\n\n\ndef _get_flat_fields_from_params(fields: List[ModelField]) -> List[ModelField]:\n if not fields:\n return fields\n first_field = fields[0]\n if len(fields) == 1 and _is_model_class(first_field.type_):\n fields_to_extract = get_cached_model_fields(first_field.type_)\n", "start_line": 140, "end_line": 180, "total_lines": 1024, "is_truncated": false} |
| 14 | run_command | {
"command": "python3 -c \"\nfrom fastapi import FastAPI, Depends, Security\nfrom fastapi.security import OAuth2PasswordBearer\nfrom fastapi.openapi.utils import get_openapi_security_definitions\nfrom fastapi.dependencies.models import Dependant, SecurityRequirement\n\noauth2_scheme = OAuth2PasswordBearer(tokenUrl='token')\n\ndef dep_a():\n return True\n\ndef dep_b(sec=Security(oauth2_scheme, scopes=['scope_b'])):\n return True\n\ndef dep_c(sec=Security(oauth2_scheme, scopes=['scope_c']), a=Depends(dep_b)):\n return True\n\n# Mock Dependant for dep_c\n# In reality, FastAPI's dependency resolution would create this.\n# We want to see if get_flat_dependant merges scopes for the same scheme.\n\nfrom fastapi.dependencies.utils import get_flat_dependant\n\n# Manually creating Dependants to simulate the hierarchy\n# dep_b\ndep_b_dependant = Dependant(\n dependencies=[],\n security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_b'])]\n)\ndep_b_dependant.cache_key = 'dep_b'\n\n# dep_c\ndep_c_dependant = Dependant(\n dependencies=[dep_b_dependant],\n security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_c'])]\n)\ndep_c_dependant.cache_key = 'dep_c'\n\nflat = get_flat_dependant(dep_c_dependant)\nprint(f'Security Requirements: {flat.security_requirements}')\n\ndefs, ops = get_openapi_security_definitions(flat)\nprint(f'Operation Security: {ops}')\n\""
} | {"status": "ok", "stdout": "Security Requirements: [SecurityRequirement(security_scheme=<fastapi.security.oauth2.OAuth2PasswordBearer object at 0x7c574ab1e120>,full{"status": "ok", "stdout": "Security Requirements: [SecurityRequirement(security_scheme=<fastapi.security.oauth2.OAuth2PasswordBearer object at 0x7c574ab1e120>, scopes=['scope_c']), SecurityRequirement(security_scheme=<fastapi.security.oauth2.OAuth2PasswordBearer object at 0x7c574ab1e120>, scopes=['scope_b'])]\nOperation Security: [{'OAuth2PasswordBearer': ['scope_c']}, {'OAuth2PasswordBearer': ['scope_b']}]\n", "exit_code": 0} |
| 15 | run_command | {
"command": "python3 -c \"\nfrom fastapi import FastAPI, Depends, Security\nfrom fastapi.security import OAuth2PasswordBearer\nfrom fastapi.openapi.utils import get_openapi_security_definitions\nfrom fastapi.dependencies.models import Dependant, SecurityRequirement\nfrom fastapi.dependencies.utils import get_flat_dependant\n\noauth2_scheme = OAuth2PasswordBearer(tokenUrl='token')\n\n# dep_b\ndep_b_dependant = Dependant(\n dependencies=[],\n security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_b'])]\n)\ndep_b_dependant.cache_key = 'dep_b'\n\n# dep_c\ndep_c_dependant = Dependant(\n dependencies=[dep_b_dependant],\n security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_c'])]\n)\ndep_c_dependant.cache_key = 'dep_c'\n\nflat = get_flat_dependant(dep_c_dependant)\ndefs, ops = get_openapi_security_definitions(flat)\nprint(f'Operation Security: {ops}')\n\""
} | {"status": "ok", "stdout": "Operation Security: [{'OAuth2PasswordBearer': ['scope_c']}, {'OAuth2PasswordBearer': ['scope_b']}]\n", "exit_code": 0}full{"status": "ok", "stdout": "Operation Security: [{'OAuth2PasswordBearer': ['scope_c']}, {'OAuth2PasswordBearer': ['scope_b']}]\n", "exit_code": 0} |
| 16 | read_file | {
"end_line": 92,
"filepath": "fastapi/openapi/utils.py",
"start_line": 78
} | {"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_security_definitions(\n flat_dependant: Dependant,\n) -> Tuple[Dict[str, Anfull{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_security_definitions(\n flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n security_definitions = {}\n operation_security = []\n for security_requirement in flat_dependant.security_requirements:\n security_definition = jsonable_encoder(\n security_requirement.security_scheme.model,\n by_alias=True,\n exclude_none=True,\n )\n security_name = security_requirement.security_scheme.scheme_name\n security_definitions[security_name] = security_definition\n operation_security.append({security_name: security_requirement.scopes})\n return security_definitions, operation_security\n", "start_line": 78, "end_line": 92, "total_lines": 558, "is_truncated": false} |
| 17 | edit_file | {
"filepath": "fastapi/openapi/utils.py",
"new_string": "def get_openapi_security_definitions(\n flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n security_definitions = {}\n operation_security_map: Dict[str, List[str]] = {}\n for security_requirement in flat_dependant.security_requirements:\n security_definition = jsonable_encoder(\n security_requirement.security_scheme.model,\n by_alias=True,\n exclude_none=True,\n )\n security_name = security_requirement.security_scheme.scheme_name\n security_definitions[security_name] = security_definition\n if security_name not in operation_security_map:\n operation_security_map[security_name] = []\n if security_requirement.scopes:\n operation_security_map[security_name].extend(security_requirement.scopes)\n operation_security = [\n {name: scopes} for name, scopes in operation_security_map.items()\n ]\n return security_definitions, operation_security\n",
"old_string": "def get_openapi_security_definitions(\n flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n security_definitions = {}\n operation_security = []\n for security_requirement in flat_dependant.security_requirements:\n security_definition = jsonable_encoder(\n security_requirement.security_scheme.model,\n by_alias=True,\n exclude_none=True,\n )\n security_name = security_requirement.security_scheme.scheme_name\n security_definitions[security_name] = security_definition\n operation_security.append({security_name: security_requirement.scopes})\n return security_definitions, operation_security"
} | {"status": "ok", "filepath": "fastapi/openapi/utils.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/openapi/utils.py\n+++ b/fastapi/openapi/ufull{"status": "ok", "filepath": "fastapi/openapi/utils.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/openapi/utils.py\n+++ b/fastapi/openapi/utils.py\n@@ -79,7 +79,7 @@\n flat_dependant: Dependant,\n ) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n security_definitions = {}\n- operation_security = []\n+ operation_security_map: Dict[str, List[str]] = {}\n for security_requirement in flat_dependant.security_requirements:\n security_definition = jsonable_encoder(\n security_requirement.security_scheme.model,\n@@ -88,8 +88,15 @@\n )\n security_name = security_requirement.security_scheme.scheme_name\n security_definitions[security_name] = security_definition\n- operation_security.append({security_name: security_requirement.scopes})\n+ if security_name not in operation_security_map:\n+ operation_security_map[security_name] = []\n+ if security_requirement.scopes:\n+ operation_security_map[security_name].extend(security_requirement.scopes)\n+ operation_security = [\n+ {name: scopes} for name, scopes in operation_security_map.items()\n+ ]\n return security_definitions, operation_security\n+\n \n \n def _get_openapi_operation_parameters(\n", "is_truncated": false} |
| 18 | run_command | {
"command": "python3 -c \"\nfrom fastapi import FastAPI, Depends, Security\nfrom fastapi.security import OAuth2PasswordBearer\nfrom fastapi.openapi.utils import get_openapi_security_definitions\nfrom fastapi.dependencies.models import Dependant, SecurityRequirement\nfrom fastapi.dependencies.utils import get_flat_dependant\n\noauth2_scheme = OAuth2PasswordBearer(tokenUrl='token')\n\n# dep_b\ndep_b_dependant = Dependant(\n dependencies=[],\n security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_b'])]\n)\ndep_b_dependant.cache_key = 'dep_b'\n\n# dep_c\ndep_c_dependant = Dependant(\n dependencies=[dep_b_dependant],\n security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_c'])]\n)\ndep_c_dependant.cache_key = 'dep_c'\n\nflat = get_flat_dependant(dep_c_dependant)\ndefs, ops = get_openapi_security_definitions(flat)\nprint(f'Operation Security: {ops}')\n\""
} | {"status": "ok", "stdout": "Operation Security: [{'OAuth2PasswordBearer': ['scope_c', 'scope_b']}]\n", "exit_code": 0}full{"status": "ok", "stdout": "Operation Security: [{'OAuth2PasswordBearer': ['scope_c', 'scope_b']}]\n", "exit_code": 0} |
| 19 | submit_patch | [] | {"status": "ok", "patch_size": 1366, "files_changed": 1}full{"status": "ok", "patch_size": 1366, "files_changed": 1} |
diff --git a/fastapi/openapi/utils.py b/fastapi/openapi/utils.py
index dbc93d28..68278db0 100644
--- a/fastapi/openapi/utils.py
+++ b/fastapi/openapi/utils.py
@@ -79,7 +79,7 @@ def get_openapi_security_definitions(
flat_dependant: Dependant,
) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:
security_definitions = {}
- operation_security = []
+ operation_security_map: Dict[str, List[str]] = {}
for security_requirement in flat_dependant.security_requirements:
security_definition = jsonable_encoder(
security_requirement.security_scheme.model,
@@ -88,10 +88,17 @@ def get_openapi_security_definitions(
)
security_name = security_requirement.security_scheme.scheme_name
security_definitions[security_name] = security_definition
- operation_security.append({security_name: security_requirement.scopes})
+ if security_name not in operation_security_map:
+ operation_security_map[security_name] = []
+ if security_requirement.scopes:
+ operation_security_map[security_name].extend(security_requirement.scopes)
+ operation_security = [
+ {name: scopes} for name, scopes in operation_security_map.items()
+ ]
return security_definitions, operation_security
+
def _get_openapi_operation_parameters(
*,
dependant: Dependant,
F
=================================== FAILURES ===================================
_____________________ test_security_scopes_dont_propagate ______________________
def test_security_scopes_dont_propagate():
response = client.get("/scopes")
assert response.status_code == 200
> assert response.json() == {
"dep1": ["scope3", "scope1"],
"dep2": ["scope3", "scope2"],
}
E AssertionError: assert {'dep1': ['sc...1', 'scope2']} == {'dep1': ['sc...3', 'scope2']}
E
E Differing items:
E {'dep1': ['scope3', 'scope1', 'scope2']} != {'dep1': ['scope3', 'scope1']}
E {'dep2': ['scope3', 'scope1', 'scope2']} != {'dep2': ['scope3', 'scope2']}
E Use -v to get more diff
tests/test_security_scopes_dont_propagate.py:42: AssertionError
=============================== warnings summary ===============================
../../../../../../kaggle/tmp/envs/overlays/starlette-0.50.0-py3-none-any/starlette/testclient.py:45
/kaggle/tmp/envs/overlays/starlette-0.50.0-py3-none-any/starlette/testclient.py:45: DeprecationWarning: The anyio.abc.BlockingPortal alias is deprecated, use anyio.from_thread.BlockingPortal instead.
_PortalFactoryType = Callable[[], AbstractContextManager[anyio.abc.BlockingPortal]]
-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
!!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!!
1 failed, 1 warning in 0.71s