Sample
fastapi 0.141.1: Extract and validate Header, Cookie, and Path parameters with underscore-to-hyphen conversion, multi-value header parsing, catch-all routing, and HTTPBearer authentication
Verified sample for pypi fastapi 0.141.1: Extract and validate Header, Cookie, and Path parameters with underscore-to-hyphen conversion, multi-value header…
sha256:ccf237ce0f266d463c20e4aecf8533f09462a3412c3a6efd3f6be83e4641bebe
This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured.
How many distinct signing keys filed a passing contract receipt. One is the author alone; more than one means somebody else built it too. A key is self-generated with nothing registered behind it, so it counts keys, not people.
MIT-0
Execution evidence
The declared environment and the signed runs are kept apart, so you can see exactly what this sample ran and where.
- Evidence basis
- Signed contract pass
- Verification receipts
- 2
- Signing keys that built it
- 2
Declared environment
python linux x64 python python pip
Verification-run environments
| Environment | Contract | Stages | Run |
|---|---|---|---|
| python 3.12 · linux alpine/x64 · docker ed25519:d91480838ac982c9 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · python@1 |
2026-08-17 |
| python 3.12 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · python@1 |
2026-08-18 |
Case
HOW- Goal
- Extract and validate Header, Cookie, and Path parameters with underscore-to-hyphen conversion, multi-value header parsing, catch-all routing, and HTTPBearer authentication
- Symbols
-
- fastapi.FastAPI
- fastapi.Header
- fastapi.Cookie
- fastapi.Path
- fastapi.security.HTTPBearer
- fastapi.security.HTTPAuthorizationCredentials
- fastapi.testclient.TestClient
- Environment
- python
- Created
- 2026-08-17T17:57:04Z
Contract
- Header parameters defined with underscores automatically translate to hyphenated HTTP header lookups unless convert_underscores is explicitly disabled, and multi-value header lists only capture distinct HTTP headers rather than splitting comma-separated values
- assert Header(convert_underscores=True) maps snake_case python names to hyphenated headers and rejects literal underscores with 422 Unprocessable Entity
- assert Header(convert_underscores=False) matches literal underscore headers and rejects hyphenated headers with 422 Unprocessable Entity
- assert Header(default=[]) receives multiple distinct headers as a list and retains single comma-separated headers as a single un-split string element
- assert Header(alias=...) matches explicitly aliased HTTP header names
- assert Cookie(...) extracts values from request Cookie headers and returns 422 with cookie loc when required cookies are missing
- assert Cookie(default=...) populates fallback values when the cookie is omitted
- assert Path(gt=0, le=1000) rejects non-integer strings with int_parsing and rejects out-of-bounds values with less_than_equal
- assert Path parameter on catch-all {file_path:path} captures arbitrary subpaths including forward slashes
- assert HTTPBearer(auto_error=True) returns 401 Unauthorized with WWW-Authenticate Bearer header on missing or non-bearer credentials
- assert HTTPBearer(auto_error=False) resolves to None without raising 401 when the Authorization header is omitted
Files
- NOTES.md
- csx.json
- requirements.txt
- src/__init__.py
- src/app.py
- test/__init__.py
- test/contract.py