← eval4_submission_v1b

fastapi_5624

failed WRONG_FIX wrong_fix · 18 tool calls · 134 s · fastapi/fastapi

Task input

🐛 Fix hierarchical security scope propagation

see defect #5623

Tool calls (19)

#ToolArgumentsResult
1run_command
{
 "command": "grep -rn \"security\" fastapi/openapi/utils.py"
}
{"status": "ok", "stdout": "78:def get_openapi_security_definitions(\n81: security_definitions = {}\n82: operation_security = []\n83: for security_requirement i
full
{"status": "ok", "stdout": "78:def get_openapi_security_definitions(\n81:    security_definitions = {}\n82:    operation_security = []\n83:    for security_requirement in flat_dependant.security_requirements:\n84:        security_definition = jsonable_encoder(\n85:            security_requirement.security_scheme.model,\n89:        security_name = security_requirement.security_scheme.scheme_name\n90:        security_definitions[security_name] = security_definition\n91:        operation_security.append({security_name: security_requirement.scopes})\n92:    return security_definitions, operation_security\n261:    security_schemes: Dict[str, Any] = {}\n277:            security_definitions, operation_security = get_openapi_security_definitions(\n280:            if operation_security:\n281:                operation.setdefault(\"security\", []).extend(operation_security)\n282:            if security_definitions:\n283:                security_schemes.update(security_definitions)\n319:                            cb_security_schemes,\n433:    return path, security_schemes, definitions\n519:                path, security_schemes, path_definitions = result\n522:                if security_schemes:\n523:                    components.setdefault(\"securitySchemes\", {}).update(\n524:                        security_schemes\n538:                path, security_schemes, path_definitions = result\n541:                if security_schemes:\n542:                    components.setdefault(\"securitySchemes\", {}).update(\n543:                        security_schemes\n", "exit_code": 0}
2read_file
{
 "filepath": "fastapi/openapi/utils.py",
 "start_line": 78,
 "end_line": 92
}
{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_security_definitions(\n flat_dependant: Dependant,\n) -> Tuple[Dict[str, An
full
{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_security_definitions(\n    flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n    security_definitions = {}\n    operation_security = []\n    for security_requirement in flat_dependant.security_requirements:\n        security_definition = jsonable_encoder(\n            security_requirement.security_scheme.model,\n            by_alias=True,\n            exclude_none=True,\n        )\n        security_name = security_requirement.security_scheme.scheme_name\n        security_definitions[security_name] = security_definition\n        operation_security.append({security_name: security_requirement.scopes})\n    return security_definitions, operation_security\n", "start_line": 78, "end_line": 92, "total_lines": 558, "is_truncated": false}
3run_command
{
 "command": "grep -rn \"security_requirements\" fastapi/ | head -20"
}
{"status": "ok", "stdout": "fastapi/dependencies/models.py:32: security_requirements: List[SecurityRequirement] = field(default_factory=list)\nfastapi/dependenc
full
{"status": "ok", "stdout": "fastapi/dependencies/models.py:32:    security_requirements: List[SecurityRequirement] = field(default_factory=list)\nfastapi/dependencies/utils.py:156:        security_requirements=dependant.security_requirements.copy(),\nfastapi/dependencies/utils.py:171:        flat_dependant.security_requirements.extend(flat_sub.security_requirements)\nfastapi/dependencies/utils.py:257:        dependant.security_requirements.append(security_requirement)\nfastapi/openapi/utils.py:83:    for security_requirement in flat_dependant.security_requirements:\n", "exit_code": 0}
4read_file
{
 "end_line": 180,
 "filepath": "fastapi/dependencies/utils.py",
 "start_line": 140
}
{"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": "def get_flat_dependant(\n dependant: Dependant,\n *,\n skip_repeats: bool = False,\n v
full
{"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": "def get_flat_dependant(\n    dependant: Dependant,\n    *,\n    skip_repeats: bool = False,\n    visited: Optional[List[DependencyCacheKey]] = None,\n) -> Dependant:\n    if visited is None:\n        visited = []\n    visited.append(dependant.cache_key)\n\n    flat_dependant = Dependant(\n        path_params=dependant.path_params.copy(),\n        query_params=dependant.query_params.copy(),\n        header_params=dependant.header_params.copy(),\n        cookie_params=dependant.cookie_params.copy(),\n        body_params=dependant.body_params.copy(),\n        security_requirements=dependant.security_requirements.copy(),\n        use_cache=dependant.use_cache,\n        path=dependant.path,\n    )\n    for sub_dependant in dependant.dependencies:\n        if skip_repeats and sub_dependant.cache_key in visited:\n            continue\n        flat_sub = get_flat_dependant(\n            sub_dependant, skip_repeats=skip_repeats, visited=visited\n        )\n        flat_dependant.path_params.extend(flat_sub.path_params)\n        flat_dependant.query_params.extend(flat_sub.query_params)\n        flat_dependant.header_params.extend(flat_sub.header_params)\n        flat_dependant.cookie_params.extend(flat_sub.cookie_params)\n        flat_dependant.body_params.extend(flat_sub.body_params)\n        flat_dependant.security_requirements.extend(flat_sub.security_requirements)\n    return flat_dependant\n\n\ndef _get_flat_fields_from_params(fields: List[ModelField]) -> List[ModelField]:\n    if not fields:\n        return fields\n    first_field = fields[0]\n    if len(fields) == 1 and _is_model_class(first_field.type_):\n        fields_to_extract = get_cached_model_fields(first_field.type_)\n", "start_line": 140, "end_line": 180, "total_lines": 1024, "is_truncated": false}
5run_command
{
 "command": "grep -rn \"SecurityRequirement\" fastapi/dependencies/models.py"
}
{"status": "ok", "stdout": "19:class SecurityRequirement:\n32: security_requirements: List[SecurityRequirement] = field(default_factory=list)\n", "exit_code": 0
full
{"status": "ok", "stdout": "19:class SecurityRequirement:\n32:    security_requirements: List[SecurityRequirement] = field(default_factory=list)\n", "exit_code": 0}
6read_file
{
 "end_line": 30,
 "filepath": "fastapi/dependencies/models.py",
 "start_line": 10
}
{"status": "ok", "filepath": "fastapi/dependencies/models.py", "content": "from typing_extensions import Literal\n\nif sys.version_info >= (3, 13): # pragma: no
full
{"status": "ok", "filepath": "fastapi/dependencies/models.py", "content": "from typing_extensions import Literal\n\nif sys.version_info >= (3, 13):  # pragma: no cover\n    from inspect import iscoroutinefunction\nelse:  # pragma: no cover\n    from asyncio import iscoroutinefunction\n\n\n@dataclass\nclass SecurityRequirement:\n    security_scheme: SecurityBase\n    scopes: Optional[Sequence[str]] = None\n\n\n@dataclass\nclass Dependant:\n    path_params: List[ModelField] = field(default_factory=list)\n    query_params: List[ModelField] = field(default_factory=list)\n    header_params: List[ModelField] = field(default_factory=list)\n    cookie_params: List[ModelField] = field(default_factory=list)\n    body_params: List[ModelField] = field(default_factory=list)\n", "start_line": 10, "end_line": 30, "total_lines": 83, "is_truncated": false}
7run_command
{
 "command": "grep -rn \"SecurityRequirement\" fastapi/dependencies/utils.py | head -20"
}
{"status": "ok", "stdout": "57:from fastapi.dependencies.models import Dependant, SecurityRequirement\n254: security_requirement = SecurityRequirement(\n", "exi
full
{"status": "ok", "stdout": "57:from fastapi.dependencies.models import Dependant, SecurityRequirement\n254:        security_requirement = SecurityRequirement(\n", "exit_code": 0}
8read_file
{
 "end_line": 265,
 "filepath": "fastapi/dependencies/utils.py",
 "start_line": 240
}
{"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": " call=call,\n name=name,\n path=path,\n security_scopes=security_scopes,\n use_cache=u
full
{"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": "        call=call,\n        name=name,\n        path=path,\n        security_scopes=security_scopes,\n        use_cache=use_cache,\n        scope=scope,\n    )\n    path_param_names = get_path_param_names(path)\n    endpoint_signature = get_typed_signature(call)\n    signature_params = endpoint_signature.parameters\n    if isinstance(call, SecurityBase):\n        use_scopes: List[str] = []\n        if isinstance(call, (OAuth2, OpenIdConnect)):\n            use_scopes = security_scopes or use_scopes\n        security_requirement = SecurityRequirement(\n            security_scheme=call, scopes=use_scopes\n        )\n        dependant.security_requirements.append(security_requirement)\n    for param_name, param in signature_params.items():\n        is_path_param = param_name in path_param_names\n        param_details = analyze_param(\n            param_name=param_name,\n            annotation=param.annotation,\n            value=param.default,\n            is_path_param=is_path_param,\n        )\n", "start_line": 240, "end_line": 265, "total_lines": 1024, "is_truncated": false}
9run_command
{
 "command": "grep -rn \"SecurityRequirement\" fastapi/security/ | head -20"
}
{"status": "ok", "stdout": "", "exit_code": 0}
full
{"status": "ok", "stdout": "", "exit_code": 0}
10run_command
{
 "command": "grep -rn \"security_requirements\" fastapi/openapi/utils.py | head -20"
}
{"status": "ok", "stdout": "83: for security_requirement in flat_dependant.security_requirements:\n", "exit_code": 0}
full
{"status": "ok", "stdout": "83:    for security_requirement in flat_dependant.security_requirements:\n", "exit_code": 0}
11read_file
{
 "end_line": 100,
 "filepath": "fastapi/openapi/utils.py",
 "start_line": 70
}
{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": " \"2XX\": \"Success\",\n \"3XX\": \"Redirection\",\n \"4XX\": \"Client Error\",\n \"5XX\":
full
{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "    \"2XX\": \"Success\",\n    \"3XX\": \"Redirection\",\n    \"4XX\": \"Client Error\",\n    \"5XX\": \"Server Error\",\n    \"DEFAULT\": \"Default Response\",\n}\n\n\ndef get_openapi_security_definitions(\n    flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n    security_definitions = {}\n    operation_security = []\n    for security_requirement in flat_dependant.security_requirements:\n        security_definition = jsonable_encoder(\n            security_requirement.security_scheme.model,\n            by_alias=True,\n            exclude_none=True,\n        )\n        security_name = security_requirement.security_scheme.scheme_name\n        security_definitions[security_name] = security_definition\n        operation_security.append({security_name: security_requirement.scopes})\n    return security_definitions, operation_security\n\n\ndef _get_openapi_operation_parameters(\n    *,\n    dependant: Dependant,\n    model_name_map: ModelNameMap,\n    field_mapping: Dict[\n        Tuple[ModelField, Literal[\"validation\", \"serialization\"]], JsonSchemaValue\n", "start_line": 70, "end_line": 100, "total_lines": 558, "is_truncated": false}
12run_command
{
 "command": "grep -rn \"security_requirements\" fastapi/dependencies/utils.py | head -20"
}
{"status": "ok", "stdout": "156: security_requirements=dependant.security_requirements.copy(),\n171: flat_dependant.security_requirements.extend(flat_sub.securi
full
{"status": "ok", "stdout": "156:        security_requirements=dependant.security_requirements.copy(),\n171:        flat_dependant.security_requirements.extend(flat_sub.security_requirements)\n257:        dependant.security_requirements.append(security_requirement)\n", "exit_code": 0}
13read_file
{
 "end_line": 180,
 "filepath": "fastapi/dependencies/utils.py",
 "start_line": 140
}
{"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": "def get_flat_dependant(\n dependant: Dependant,\n *,\n skip_repeats: bool = False,\n v
full
{"status": "ok", "filepath": "fastapi/dependencies/utils.py", "content": "def get_flat_dependant(\n    dependant: Dependant,\n    *,\n    skip_repeats: bool = False,\n    visited: Optional[List[DependencyCacheKey]] = None,\n) -> Dependant:\n    if visited is None:\n        visited = []\n    visited.append(dependant.cache_key)\n\n    flat_dependant = Dependant(\n        path_params=dependant.path_params.copy(),\n        query_params=dependant.query_params.copy(),\n        header_params=dependant.header_params.copy(),\n        cookie_params=dependant.cookie_params.copy(),\n        body_params=dependant.body_params.copy(),\n        security_requirements=dependant.security_requirements.copy(),\n        use_cache=dependant.use_cache,\n        path=dependant.path,\n    )\n    for sub_dependant in dependant.dependencies:\n        if skip_repeats and sub_dependant.cache_key in visited:\n            continue\n        flat_sub = get_flat_dependant(\n            sub_dependant, skip_repeats=skip_repeats, visited=visited\n        )\n        flat_dependant.path_params.extend(flat_sub.path_params)\n        flat_dependant.query_params.extend(flat_sub.query_params)\n        flat_dependant.header_params.extend(flat_sub.header_params)\n        flat_dependant.cookie_params.extend(flat_sub.cookie_params)\n        flat_dependant.body_params.extend(flat_sub.body_params)\n        flat_dependant.security_requirements.extend(flat_sub.security_requirements)\n    return flat_dependant\n\n\ndef _get_flat_fields_from_params(fields: List[ModelField]) -> List[ModelField]:\n    if not fields:\n        return fields\n    first_field = fields[0]\n    if len(fields) == 1 and _is_model_class(first_field.type_):\n        fields_to_extract = get_cached_model_fields(first_field.type_)\n", "start_line": 140, "end_line": 180, "total_lines": 1024, "is_truncated": false}
14run_command
{
 "command": "python3 -c \"\nfrom fastapi import FastAPI, Depends, Security\nfrom fastapi.security import OAuth2PasswordBearer\nfrom fastapi.openapi.utils import get_openapi_security_definitions\nfrom fastapi.dependencies.models import Dependant, SecurityRequirement\n\noauth2_scheme = OAuth2PasswordBearer(tokenUrl='token')\n\ndef dep_a():\n    return True\n\ndef dep_b(sec=Security(oauth2_scheme, scopes=['scope_b'])):\n    return True\n\ndef dep_c(sec=Security(oauth2_scheme, scopes=['scope_c']), a=Depends(dep_b)):\n    return True\n\n# Mock Dependant for dep_c\n# In reality, FastAPI's dependency resolution would create this.\n# We want to see if get_flat_dependant merges scopes for the same scheme.\n\nfrom fastapi.dependencies.utils import get_flat_dependant\n\n# Manually creating Dependants to simulate the hierarchy\n# dep_b\ndep_b_dependant = Dependant(\n    dependencies=[],\n    security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_b'])]\n)\ndep_b_dependant.cache_key = 'dep_b'\n\n# dep_c\ndep_c_dependant = Dependant(\n    dependencies=[dep_b_dependant],\n    security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_c'])]\n)\ndep_c_dependant.cache_key = 'dep_c'\n\nflat = get_flat_dependant(dep_c_dependant)\nprint(f'Security Requirements: {flat.security_requirements}')\n\ndefs, ops = get_openapi_security_definitions(flat)\nprint(f'Operation Security: {ops}')\n\""
}
{"status": "ok", "stdout": "Security Requirements: [SecurityRequirement(security_scheme=<fastapi.security.oauth2.OAuth2PasswordBearer object at 0x7c574ab1e120>,
full
{"status": "ok", "stdout": "Security Requirements: [SecurityRequirement(security_scheme=<fastapi.security.oauth2.OAuth2PasswordBearer object at 0x7c574ab1e120>, scopes=['scope_c']), SecurityRequirement(security_scheme=<fastapi.security.oauth2.OAuth2PasswordBearer object at 0x7c574ab1e120>, scopes=['scope_b'])]\nOperation Security: [{'OAuth2PasswordBearer': ['scope_c']}, {'OAuth2PasswordBearer': ['scope_b']}]\n", "exit_code": 0}
15run_command
{
 "command": "python3 -c \"\nfrom fastapi import FastAPI, Depends, Security\nfrom fastapi.security import OAuth2PasswordBearer\nfrom fastapi.openapi.utils import get_openapi_security_definitions\nfrom fastapi.dependencies.models import Dependant, SecurityRequirement\nfrom fastapi.dependencies.utils import get_flat_dependant\n\noauth2_scheme = OAuth2PasswordBearer(tokenUrl='token')\n\n# dep_b\ndep_b_dependant = Dependant(\n    dependencies=[],\n    security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_b'])]\n)\ndep_b_dependant.cache_key = 'dep_b'\n\n# dep_c\ndep_c_dependant = Dependant(\n    dependencies=[dep_b_dependant],\n    security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_c'])]\n)\ndep_c_dependant.cache_key = 'dep_c'\n\nflat = get_flat_dependant(dep_c_dependant)\ndefs, ops = get_openapi_security_definitions(flat)\nprint(f'Operation Security: {ops}')\n\""
}
{"status": "ok", "stdout": "Operation Security: [{'OAuth2PasswordBearer': ['scope_c']}, {'OAuth2PasswordBearer': ['scope_b']}]\n", "exit_code": 0}
full
{"status": "ok", "stdout": "Operation Security: [{'OAuth2PasswordBearer': ['scope_c']}, {'OAuth2PasswordBearer': ['scope_b']}]\n", "exit_code": 0}
16read_file
{
 "end_line": 92,
 "filepath": "fastapi/openapi/utils.py",
 "start_line": 78
}
{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_security_definitions(\n flat_dependant: Dependant,\n) -> Tuple[Dict[str, An
full
{"status": "ok", "filepath": "fastapi/openapi/utils.py", "content": "def get_openapi_security_definitions(\n    flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n    security_definitions = {}\n    operation_security = []\n    for security_requirement in flat_dependant.security_requirements:\n        security_definition = jsonable_encoder(\n            security_requirement.security_scheme.model,\n            by_alias=True,\n            exclude_none=True,\n        )\n        security_name = security_requirement.security_scheme.scheme_name\n        security_definitions[security_name] = security_definition\n        operation_security.append({security_name: security_requirement.scopes})\n    return security_definitions, operation_security\n", "start_line": 78, "end_line": 92, "total_lines": 558, "is_truncated": false}
17edit_file
{
 "filepath": "fastapi/openapi/utils.py",
 "new_string": "def get_openapi_security_definitions(\n    flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n    security_definitions = {}\n    operation_security_map: Dict[str, List[str]] = {}\n    for security_requirement in flat_dependant.security_requirements:\n        security_definition = jsonable_encoder(\n            security_requirement.security_scheme.model,\n            by_alias=True,\n            exclude_none=True,\n        )\n        security_name = security_requirement.security_scheme.scheme_name\n        security_definitions[security_name] = security_definition\n        if security_name not in operation_security_map:\n            operation_security_map[security_name] = []\n        if security_requirement.scopes:\n            operation_security_map[security_name].extend(security_requirement.scopes)\n    operation_security = [\n        {name: scopes} for name, scopes in operation_security_map.items()\n    ]\n    return security_definitions, operation_security\n",
 "old_string": "def get_openapi_security_definitions(\n    flat_dependant: Dependant,\n) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n    security_definitions = {}\n    operation_security = []\n    for security_requirement in flat_dependant.security_requirements:\n        security_definition = jsonable_encoder(\n            security_requirement.security_scheme.model,\n            by_alias=True,\n            exclude_none=True,\n        )\n        security_name = security_requirement.security_scheme.scheme_name\n        security_definitions[security_name] = security_definition\n        operation_security.append({security_name: security_requirement.scopes})\n    return security_definitions, operation_security"
}
{"status": "ok", "filepath": "fastapi/openapi/utils.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/openapi/utils.py\n+++ b/fastapi/openapi/u
full
{"status": "ok", "filepath": "fastapi/openapi/utils.py", "occurrences": 1, "strategy": "exact", "diff": "--- a/fastapi/openapi/utils.py\n+++ b/fastapi/openapi/utils.py\n@@ -79,7 +79,7 @@\n     flat_dependant: Dependant,\n ) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:\n     security_definitions = {}\n-    operation_security = []\n+    operation_security_map: Dict[str, List[str]] = {}\n     for security_requirement in flat_dependant.security_requirements:\n         security_definition = jsonable_encoder(\n             security_requirement.security_scheme.model,\n@@ -88,8 +88,15 @@\n         )\n         security_name = security_requirement.security_scheme.scheme_name\n         security_definitions[security_name] = security_definition\n-        operation_security.append({security_name: security_requirement.scopes})\n+        if security_name not in operation_security_map:\n+            operation_security_map[security_name] = []\n+        if security_requirement.scopes:\n+            operation_security_map[security_name].extend(security_requirement.scopes)\n+    operation_security = [\n+        {name: scopes} for name, scopes in operation_security_map.items()\n+    ]\n     return security_definitions, operation_security\n+\n \n \n def _get_openapi_operation_parameters(\n", "is_truncated": false}
18run_command
{
 "command": "python3 -c \"\nfrom fastapi import FastAPI, Depends, Security\nfrom fastapi.security import OAuth2PasswordBearer\nfrom fastapi.openapi.utils import get_openapi_security_definitions\nfrom fastapi.dependencies.models import Dependant, SecurityRequirement\nfrom fastapi.dependencies.utils import get_flat_dependant\n\noauth2_scheme = OAuth2PasswordBearer(tokenUrl='token')\n\n# dep_b\ndep_b_dependant = Dependant(\n    dependencies=[],\n    security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_b'])]\n)\ndep_b_dependant.cache_key = 'dep_b'\n\n# dep_c\ndep_c_dependant = Dependant(\n    dependencies=[dep_b_dependant],\n    security_requirements=[SecurityRequirement(security_scheme=oauth2_scheme, scopes=['scope_c'])]\n)\ndep_c_dependant.cache_key = 'dep_c'\n\nflat = get_flat_dependant(dep_c_dependant)\ndefs, ops = get_openapi_security_definitions(flat)\nprint(f'Operation Security: {ops}')\n\""
}
{"status": "ok", "stdout": "Operation Security: [{'OAuth2PasswordBearer': ['scope_c', 'scope_b']}]\n", "exit_code": 0}
full
{"status": "ok", "stdout": "Operation Security: [{'OAuth2PasswordBearer': ['scope_c', 'scope_b']}]\n", "exit_code": 0}
19submit_patch
[]
{"status": "ok", "patch_size": 1366, "files_changed": 1}
full
{"status": "ok", "patch_size": 1366, "files_changed": 1}

Patch

diff --git a/fastapi/openapi/utils.py b/fastapi/openapi/utils.py
index dbc93d28..68278db0 100644
--- a/fastapi/openapi/utils.py
+++ b/fastapi/openapi/utils.py
@@ -79,7 +79,7 @@ def get_openapi_security_definitions(
     flat_dependant: Dependant,
 ) -> Tuple[Dict[str, Any], List[Dict[str, Any]]]:
     security_definitions = {}
-    operation_security = []
+    operation_security_map: Dict[str, List[str]] = {}
     for security_requirement in flat_dependant.security_requirements:
         security_definition = jsonable_encoder(
             security_requirement.security_scheme.model,
@@ -88,10 +88,17 @@ def get_openapi_security_definitions(
         )
         security_name = security_requirement.security_scheme.scheme_name
         security_definitions[security_name] = security_definition
-        operation_security.append({security_name: security_requirement.scopes})
+        if security_name not in operation_security_map:
+            operation_security_map[security_name] = []
+        if security_requirement.scopes:
+            operation_security_map[security_name].extend(security_requirement.scopes)
+    operation_security = [
+        {name: scopes} for name, scopes in operation_security_map.items()
+    ]
     return security_definitions, operation_security
 
 
+
 def _get_openapi_operation_parameters(
     *,
     dependant: Dependant,

Test output

show
F
=================================== FAILURES ===================================
_____________________ test_security_scopes_dont_propagate ______________________

    def test_security_scopes_dont_propagate():
        response = client.get("/scopes")
        assert response.status_code == 200
>       assert response.json() == {
            "dep1": ["scope3", "scope1"],
            "dep2": ["scope3", "scope2"],
        }
E       AssertionError: assert {'dep1': ['sc...1', 'scope2']} == {'dep1': ['sc...3', 'scope2']}
E         
E         Differing items:
E         {'dep1': ['scope3', 'scope1', 'scope2']} != {'dep1': ['scope3', 'scope1']}
E         {'dep2': ['scope3', 'scope1', 'scope2']} != {'dep2': ['scope3', 'scope2']}
E         Use -v to get more diff

tests/test_security_scopes_dont_propagate.py:42: AssertionError
=============================== warnings summary ===============================
../../../../../../kaggle/tmp/envs/overlays/starlette-0.50.0-py3-none-any/starlette/testclient.py:45
  /kaggle/tmp/envs/overlays/starlette-0.50.0-py3-none-any/starlette/testclient.py:45: DeprecationWarning: The anyio.abc.BlockingPortal alias is deprecated, use anyio.from_thread.BlockingPortal instead.
    _PortalFactoryType = Callable[[], AbstractContextManager[anyio.abc.BlockingPortal]]

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
!!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!!
1 failed, 1 warning in 0.71s