Skip to content

Security

openapi_first.security

Summary

OpenAPI security scheme parsing and auto-generated auth dependencies.

This module reads securitySchemes and per-operation security from an OpenAPI spec, resolves {ENV_VAR} placeholders in x- extension fields, and generates FastAPI dependencies for token validation (e.g., Bearer JWT introspection).

Functions

make_security_dependencies 

1
2
3
4
make_security_dependencies(
    spec: dict[str, Any],
    security_schemes: dict[str, dict[str, Any]],
) -> dict[str, list[Any]]

Build a mapping of METHOD:/path → list of Depends(...).

The effective security for each operation is resolved by:

  1. Using the operation-level security field if present.
  2. Falling back to the top-level security field.
  3. An empty list means no auth required for that operation.

parse_security_schemes 

1
2
3
parse_security_schemes(
    spec: dict[str, Any],
) -> dict[str, dict[str, Any]]

Extract and resolve environment variables in security schemes.