You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Matt Hartigan
55b88d660b
feat: add audit_security() method for security dependency auditing
Adds `app.audit_security()` that returns a list of all routes with no
SecurityBase dependency anywhere in their dependency tree. Recursively
walks nested dependencies to detect security schemes at any depth.
Detects all security types: OAuth2PasswordBearer, HTTPBearer, HTTPBasic,
APIKeyHeader/Query/Cookie, OpenIdConnect, and Security() with scopes.
Also detects router-level security dependencies.
Use case: security reviews and compliance audits. There is currently no
way to statically determine which FastAPI endpoints are unprotected
without manually traversing the full dependency graph of every route.
Example:
unprotected = app.audit_security()
for route in unprotected:
print(f"UNPROTECTED: {route['methods']} {route['path']}")
5 months ago
..
_compat
✨ Serialize JSON response with Pydantic (in Rust), when there's a Pydantic return type or response model (#14962)
5 months ago
dependencies
🎨 Update internal types for Python 3.10 (#14898)
5 months ago
middleware
📝 Use `WSGIMiddleware` from `a2wsgi` instead of deprecated `fastapi.middleware.wsgi.WSGIMiddleware` (#14756)
5 months ago
openapi
♻️ Refactor logic to handle OpenAPI and Swagger UI escaping data (#14986)
5 months ago
security
🎨 Update internal types for Python 3.10 (#14898)
5 months ago
__init__.py
🔖 Release version 0.133.0
5 months ago
__main__.py
♻️ Add support for `pip install "fastapi[standard]"` with standard dependencies and `python -m fastapi` (#11935)
2 years ago
applications.py
feat: add audit_security() method for security dependency auditing
5 months ago
background.py
🎨 Update internal types for Python 3.10 (#14898)
5 months ago
cli.py
♻️ Add support for `pip install "fastapi[standard]"` with standard dependencies and `python -m fastapi` (#11935)
2 years ago
concurrency.py
♻️ Upgrade internal syntax to Python 3.9+ 🎉 (#14564)
7 months ago
datastructures.py
🐛 Fix JSON Schema for files, use `contentMediaType` instead of `format: binary` (#14953)
5 months ago
encoders.py
🎨 Update internal types for Python 3.10 (#14898)
5 months ago
exception_handlers.py
⬆️ Upgrade Starlette supported version range to >=0.40.0,<0.49.0 (#14077)
10 months ago
exceptions.py
🎨 Update internal types for Python 3.10 (#14898)
5 months ago
logger.py
🔊 Refactor logging (#781)
7 years ago
param_functions.py
🎨 Update internal types for Python 3.10 (#14898)
5 months ago
params.py
🎨 Update internal types for Python 3.10 (#14898)
5 months ago
py.typed
✨ add py.typed to ship typing information (#209)
7 years ago
requests.py
⬆ Require Pydantic > 1.0 (#1862)
6 years ago
responses.py
🗑️ Deprecate `ORJSONResponse` and `UJSONResponse` (#14964)
5 months ago
routing.py
🔒 ️ Add `strict_content_type` checking for JSON requests (#14978)
5 months ago
staticfiles.py
✨ Improve type annotations, add support for mypy --strict, internally and for external packages (#2547)
6 years ago
templating.py
✨ Improve type annotations, add support for mypy --strict, internally and for external packages (#2547)
6 years ago
testclient.py
✨ Improve type annotations, add support for mypy --strict, internally and for external packages (#2547)
6 years ago
types.py
🎨 Update internal types for Python 3.10 (#14898)
5 months ago
utils.py
🎨 Update internal types for Python 3.10 (#14898)
5 months ago
websockets.py
✨ Export `WebSocketState` in `fastapi.websockets` (#4376)
4 years ago