kennethreitz e0717e32ba v5.2: auth ext + OpenAPI security schemes + security-headers middleware ...

- responder.ext.auth: BearerAuth/BasicAuth/APIKeyAuth schemes usable as
  dependencies (inject the principal) or called directly; sync/async verify,
  constant-time static-secret paths, correct 401 + WWW-Authenticate.
- OpenAPI security: api.add_security_scheme()/scheme.register(api) populate
  components.securitySchemes (Swagger Authorize button); security= on routes/
  verb decorators marks per-op requirements; default=True requires globally.
- API(security_headers=True) + responder.middleware.SecurityHeadersMiddleware:
  opt-in nosniff/X-Frame-Options/Referrer-Policy (+ optional CSP/Permissions),
  preserving handler-set headers.
- DI: callable instances with async __call__ are now awaited (not run in a
  thread), which is what lets an auth scheme object be a dependency.

Backwards-compatible. 490 tests pass; ruff + mypy clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-28 20:02:35 -04:00

..

__init__.py

added test cases for routes.py

2018-10-13 13:59:46 +01:00

conftest.py

v5 B3: secure-by-default sessions

2026-06-28 10:37:14 -04:00

test_async_backends.py

v5 B4: async-native backends + sliding-TTL touch

2026-06-28 10:41:43 -04:00

test_auth.py

v5.2: auth ext + OpenAPI security schemes + security-headers middleware

2026-06-28 20:02:35 -04:00

test_cli.py

CI: Use uv exclusively (#606)

2026-03-25 19:48:54 -04:00

test_composable_di.py

v5 B6: composable dependency injection

2026-06-28 10:48:12 -04:00

test_cookies_vary.py

v5.1: finish v5's typed/OpenAPI story + add expected ergonomics

2026-06-28 19:48:22 -04:00

test_coverage.py

Add HTTP method semantics, handler return values, and app-scoped dependencies

2026-06-11 21:41:12 -04:00

test_dependencies.py

Add HTTP method semantics, handler return values, and app-scoped dependencies

2026-06-11 21:41:12 -04:00

test_encodings.py

v3.0.0: Modernize for latest Starlette, drop EOL Pythons

2026-03-22 05:51:47 -04:00

test_graphql.py

v5 B5: uppercase req.method with case-insensitive deprecation shim

2026-06-28 10:27:00 -04:00

test_hsts.py

v5.1: finish v5's typed/OpenAPI story + add expected ergonomics

2026-06-28 19:48:22 -04:00

test_http_semantics.py

Add WebSocket DI, OpenAPI 3.1, negotiated errors; zero mypy/ruff findings

2026-06-11 21:58:03 -04:00

test_improvements.py

Add dependency injection, per-route rate limiting, and WebSocket short-circuit

2026-06-11 21:07:29 -04:00

test_load_target.py

Move pueblo and graphene behind 'cli' and 'graphql' extras

2026-06-12 01:29:59 -04:00

test_logging.py

Add WebSocket DI, OpenAPI 3.1, negotiated errors; zero mypy/ruff findings

2026-06-11 21:58:03 -04:00

test_marker_constraints.py

v5.1: finish v5's typed/OpenAPI story + add expected ergonomics

2026-06-28 19:48:22 -04:00

test_method_case.py

v5 B3: secure-by-default sessions

2026-06-28 10:37:14 -04:00

test_middleware_stack.py

v5 B3: secure-by-default sessions

2026-06-28 10:37:14 -04:00

test_models.py

Code quality improvements and test fixes (#592)

2026-03-22 07:44:11 -04:00

test_new_features.py

Chore: Code formatting (#594)

2026-03-24 15:21:04 -04:00

test_responder.py

Fix WSGI mount returning 400 at mount root (#600)

2026-03-24 15:16:29 -04:00

test_round3.py

Add WebSocket DI, OpenAPI 3.1, negotiated errors; zero mypy/ruff findings

2026-06-11 21:58:03 -04:00

test_round4.py

Add conditional requests, upload streaming, rate-limit backends, app state

2026-06-11 22:18:29 -04:00

test_round5.py

Add slash redirects, request size limits, auto-ETag, after-response tasks

2026-06-11 22:48:45 -04:00

test_round6.py

Add range requests, downloads, request timeouts, and route caching

2026-06-11 23:57:15 -04:00

test_round7.py

v5 B4: async-native backends + sliding-TTL touch

2026-06-28 10:41:43 -04:00

test_secure_sessions.py

v5 B3: secure-by-default sessions

2026-06-28 10:37:14 -04:00

test_security_headers.py

v5.2: auth ext + OpenAPI security schemes + security-headers middleware

2026-06-28 20:02:35 -04:00

test_status_codes.py

Chore: Format code using Ruff, and fix linter errors (#531)

2024-10-24 07:30:18 -04:00

test_typed_io.py

v5 B1+B7: typed handler I/O (Query/Header/Cookie/Path markers + return model)

2026-06-28 10:53:04 -04:00

test_typed_openapi.py

v5.1: finish v5's typed/OpenAPI story + add expected ergonomics

2026-06-28 19:48:22 -04:00

test_v5_review_fixes.py

v5: fix 7 bugs found by the adversarial review of the v5 diff

2026-06-28 11:19:15 -04:00

test_vast_improvements.py

v5 B4: async-native backends + sliding-TTL touch

2026-06-28 10:41:43 -04:00

test_verb_decorators.py

v5.1: finish v5's typed/OpenAPI story + add expected ergonomics

2026-06-28 19:48:22 -04:00

util.py

Code quality improvements and test fixes (#592)

2026-03-22 07:44:11 -04:00