Added password format to Oauth2PasswordRequestFormStrict fields

fastapi/security/oauth2.py

@@ -255,7 +255,7 @@ class OAuth2PasswordRequestFormStrict(OAuth2PasswordRequestForm):
         ],
         password: Annotated[
             str,
-            Form(),
+            Form(json_schema_extra={"format": "password"}),
             Doc(
                 """
                 `password` string. The OAuth2 spec requires the exact field name
@@ -306,7 +306,7 @@ class OAuth2PasswordRequestFormStrict(OAuth2PasswordRequestForm):
         ] = None,
         client_secret: Annotated[
             str | None,
-            Form(),
+            Form(json_schema_extra={"format": "password"}),
             Doc(
                 """
                 If there's a `client_password` (and a `client_id`), they can be sent

tests/test_security_oauth2.py

@@ -213,7 +213,7 @@ def test_openapi_schema():
                                 "type": "string",
                             },
                             "username": {"title": "Username", "type": "string"},
-                            "password": {"title": "Password", "type": "string"},
+                            "password": {"title": "Password", 'format': 'password', "type": "string"},
                             "scope": {
                                 "title": "Scope",
                                 "type": "string",
@@ -224,8 +224,7 @@ def test_openapi_schema():
                                 "anyOf": [{"type": "string"}, {"type": "null"}],
                             },
                             "client_secret": {
-                                "title": "Client Secret",
+                                "title": "Client Secret", 'format': 'password', "anyOf": [{"type": "string"}, {"type": "null"}],
-                                "anyOf": [{"type": "string"}, {"type": "null"}],
                             },
                         },
                     },