[QUESTION] /docs - how to add the token to authorize button?

How to add the token to authorize button?

First of all I want to congratulate you for the excellent work on FastApi and give my apologize for my english.

I did not find the way to add a Bearer Token to the Authorize Button on “docs page”.

Could you help me? Attach an example

Thanks in advance !!!

Adrián

from fastapi import FastAPI, HTTPException, Security, Depends
from fastapi.security import OAuth2PasswordBearer
from pydantic import BaseModel
from starlette.middleware.cors import CORSMiddleware
import jwt
from datetime import datetime, timedelta

SECRET_KEY = "25cda665298a1ac9a0b5bcf37ddf1c5523f42ccb5cc1f347218b46d42cce7053"
ALGORITHM = "HS256"

class UsuarioGetToken(BaseModel):
    email: str
    password: str = None

class Usuario_Session(BaseModel):
    usuario_id: int
    nombre: str 

class Token(BaseModel):
    token_type: str
    token: str

# FastAPI specific code
app = FastAPI(title='API Test', version='0.1')
app.add_middleware(CORSMiddleware, allow_origins=["*"], allow_methods=["*"], allow_headers=["*"])
token_check = OAuth2PasswordBearer(tokenUrl="/login")    


def get_current_user(token: str = Security(token_check)):
    try:    
        usuario_session = jwt.decode(token, SECRET_KEY, algorithm=ALGORITHM)
    except:
        raise HTTPException(status_code=401, detail="Sessión inválida")    
    return Usuario_Session(**usuario_session)  
    
# Dependency
@app.post("/login", response_model=Token, summary="Autentificación de usuario")
def login(user: UsuarioGetToken):
    to_encode = {"usuario_id": 1, "nombre": user.email}
    expire = datetime.utcnow() + timedelta(minutes=60)
    to_encode.update({"exp": expire, "sub": "Test"})
    access_token = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
    return Token(token = access_token, token_type = 'Bearer')

@app.get("/test")
def test(current_user: Usuario_Session = Depends(get_current_user)):
    # Verifico los datos
    return {'data': 'ok'}

[tiangolo]

@adriangallegos you have a couple of bugs in the example:

• The JSON containing the token returned MUST have a key access_token, token alone won’t work.
• By declaring user: UsuarioGetToken in login() you are declaring a JSON body. The OAuth 2.0 spec requires you to receive form data, not JSON, and the fields have to be username (not email) and password.
  • For this, use the provided OAuth2PasswordRequestForm, import it and use it as a dependency.
  • Read OAuth2PasswordRequestForm.username to get the email of your user. You can use emails as usernames, as long as for authentication you use exactly username. That’s not a limitation of FastAPI, is part of the spec.

Here’s your same code with the minimal changes to work:

from fastapi import FastAPI, HTTPException, Security, Depends
from fastapi.security import OAuth2PasswordBearer, OAuth2PasswordRequestForm
from pydantic import BaseModel
from starlette.middleware.cors import CORSMiddleware
import jwt
from datetime import datetime, timedelta

SECRET_KEY = "25cda665298a1ac9a0b5bcf37ddf1c5523f42ccb5cc1f347218b46d42cce7053"
ALGORITHM = "HS256"

class Usuario_Session(BaseModel):
    usuario_id: int
    nombre: str 

class Token(BaseModel):
    token_type: str
    access_token: str

# FastAPI specific code
app = FastAPI(title='API Test', version='0.1')
app.add_middleware(CORSMiddleware, allow_origins=["*"], allow_methods=["*"], allow_headers=["*"])
token_check = OAuth2PasswordBearer(tokenUrl="/login")    


def get_current_user(token: str = Security(token_check)):
    try:    
        usuario_session = jwt.decode(token, SECRET_KEY, algorithm=ALGORITHM)
    except:
        raise HTTPException(status_code=401, detail="Sessión inválida")    
    return Usuario_Session(**usuario_session)  
    
# Dependency
@app.post("/login", response_model=Token, summary="Autentificación de usuario")
def login(form_data: OAuth2PasswordRequestForm = Depends()):
    to_encode = {"usuario_id": 1, "nombre": form_data.username}
    expire = datetime.utcnow() + timedelta(minutes=60)
    to_encode.update({"exp": expire, "sub": "Test"})
    access_token = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
    return Token(access_token = access_token, token_type = 'Bearer')

@app.get("/test")
def test(current_user: Usuario_Session = Depends(get_current_user)):
    # Verifico los datos
    return {'data': 'ok'}

[ahsanrossi]

Hi there , i am facing this method not allowed error while doing authenticattion