# Test security scheme at the top level, including OpenAPI # Ref: https://github.com/fastapi/fastapi/discussions/14263 # Ref: https://github.com/fastapi/fastapi/issues/14271 from fastapi import Depends, FastAPI from fastapi.security import HTTPBearer from fastapi.testclient import TestClient from inline_snapshot import snapshot app = FastAPI() bearer_scheme = HTTPBearer() @app.get("/", dependencies=[Depends(bearer_scheme)]) async def get_root(): return {"message": "Hello, World!"} client = TestClient(app) def test_get_root(): response = client.get("/", headers={"Authorization": "Bearer token"}) assert response.status_code == 200, response.text assert response.json() == {"message": "Hello, World!"} def test_get_root_no_token(): response = client.get("/") assert response.status_code == 401, response.text assert response.json() == {"detail": "Not authenticated"} def test_openapi_schema(): response = client.get("/openapi.json") assert response.status_code == 200, response.text assert response.json() == snapshot( { "openapi": "3.1.0", "info": {"title": "FastAPI", "version": "0.1.0"}, "paths": { "/": { "get": { "summary": "Get Root", "operationId": "get_root__get", "responses": { "200": { "description": "Successful Response", "content": {"application/json": {"schema": {}}}, } }, "security": [{"HTTPBearer": []}], } } }, "components": { "securitySchemes": {"HTTPBearer": {"type": "http", "scheme": "bearer"}} }, } )