Wooo, what a great great Video !!!!!, Excellent I do appreciate it !!!, I've been developing softWare for 40 years ( since I was 14 ), few videos like this one !!, and I've watched lots !!!
@BekBrace Жыл бұрын
Thank you very much for such kind words 🙏🙂
@MohamedBadr-xc7xq2 жыл бұрын
Great tutorial man, no animation or crazy graphics, just intelligent man explaining programming! Hats off to you brother
@BekBrace2 жыл бұрын
Thank you very much
@juanmanero46312 жыл бұрын
you are the FASTAPI king of youtube , man !!
@BekBrace2 жыл бұрын
hehe - Thanks for the compliment :)
@juanmanero46312 жыл бұрын
@@BekBrace the truth ma man
@marcus73872 жыл бұрын
Friday night tutorial! Thank you Bek, great work
@BekBrace2 жыл бұрын
Thank you
@marcus73872 жыл бұрын
@@BekBrace please can you make tutorial on FastAPI and machine learning?
@BekBrace2 жыл бұрын
@@marcus7387 sure, it’s doable 🙂
@DevBishwasBh2 жыл бұрын
Wow, you already have an awesome tutorial on FastAPI Authentication. I am waiting for a tutorial on integrating it with Next Js [possible with Next Auth].
@BekBrace2 жыл бұрын
There will be :)
@DevBishwasBh2 жыл бұрын
@@BekBrace Great! That tutorial will begin my renewed webdev journey with FastAPI and Next Js. Thanks for the efforts 😊
@gerardmunoz60752 жыл бұрын
Thanks Bek Brace for great tutorial, it was difficult for me as beginner, but I learned a few things too and will continue to learn fastapi because it's the best
@BekBrace2 жыл бұрын
Glad to hear that - thanks for watching
@luizferez892 жыл бұрын
Amazing , thanks a lot I was waiting FastAPI, thank you for answering the request, you really deserve more views
@BekBrace2 жыл бұрын
Thank you
@user-yr8tm1cd1k3 ай бұрын
Это отличное видео! Всё чётко и подробно!
@BekBrace3 ай бұрын
Огромное тебе спасибо, друг 🙏
@pawelsb2 жыл бұрын
Awesome quality content as always, keep it up Bek ✨
@BekBrace2 жыл бұрын
Thanks so much Pawel 🙂 🙏
@user-ms9cl1rf9w7 ай бұрын
Hey, Bek have just subscribed your channel for developing & learning software skiils, I like your teaching skills that there is silent background music with your slowly teaching techniques & explanation + hands-on. your videos on Django is on of the great Tutorial for me ...! Thanks man...
@BekBrace6 ай бұрын
Thank you! Stay sharp and good luck to your programming journey, man
@MuhammedBasil2 жыл бұрын
Amazing Tutorial. Crisp and Clear. Thank you !.
@BekBrace2 жыл бұрын
Thank you so much Mohamed - Happy Ramadan to you
@MuhammedBasil2 жыл бұрын
@@BekBrace i just tried the same now. No hiccups, very easy to follow. Thanks again mate. Happy Ramadan to you too.
@ChrisShawUK2 жыл бұрын
great video Bek. Super clear to follow all the steps
@BekBrace2 жыл бұрын
Thank you very much, Chris 🙏
@davidmiricho3852 жыл бұрын
Great video on FAST API. Loving it
@BekBrace2 жыл бұрын
Thank you so much, David
@shamansharif Жыл бұрын
Just subscribed. This helped me a lot. I can't thank you enough. Love from Bangladesh.
@BekBrace Жыл бұрын
Tha k you my friend, I appreciate your support to the channel
@yura21102 жыл бұрын
keep going ! this was a really clean video !!
@BekBrace2 жыл бұрын
Thank you so much Yura !
@monasser62 жыл бұрын
Great course, thank you Bek Brace
@BekBrace2 жыл бұрын
Thank You
@pramudyadika_5 ай бұрын
thanks! ur explanation is crystal clear!
@BekBrace5 ай бұрын
Thank you very much 🙂
@JemilMarcosTyC Жыл бұрын
Thanks a lot! very helpfull, BUT, if I try this on postman, no matter what string I put on Authorization it will bypass security and let me post... I also added the retraint to be a token bearer to even list the penguins, tigers and stuff and it let me through
@BekBrace Жыл бұрын
I am aware of the issue, once i have the time i will check out deeper and write the solution in the description - thanks for the heads-up though
@piuskariuki529510 ай бұрын
This is friggin AWESOME
@BekBrace10 ай бұрын
Thank you so much 🙂🙏
@user-wo1qc2hp6z11 ай бұрын
Thank you man,it was a nice one,really learnt and understood what i was working on
@BekBrace11 ай бұрын
Thank you very much, my friend
@kadiryaren5564 Жыл бұрын
just one word! Perfect!
@BekBrace Жыл бұрын
Thank you very much
@vini_yz Жыл бұрын
Really great tutorial man! It helped me a lot. Thanks for the content
@BekBrace Жыл бұрын
Good to hear my friend
@lfcamacho2 жыл бұрын
great video! as mentioned before by other people, the only issue with this, is the authorization at the end... you can simply type any key instead of the generated token, even a single character and it will grant you access to the Post method. How can we make sure the entered token is the same one we generated?
@rahulsharma-cb7kk Жыл бұрын
Yes that's the problem the route are not authenticated anyone can access it
@avinashpatel67452 жыл бұрын
Hello sir, thank you for great tutorial can you please show in other video how to show this with a frontend framework instead of showing in postman or fastapi swagger ? very good explanation, i believe you deserve more views. Regards from Pune, India
@BekBrace2 жыл бұрын
Thank you so much Avinash , your words mean a lot really. It’s an awesome idea, I can make a FastAPI Vue tutorial with JWT authentication - just added this to the three months plan for channels vids. Thanks 😊
@avinashpatel67452 жыл бұрын
@@BekBrace Thank you sir for responding. God bless you
@michaelehrenreich10 ай бұрын
Excellent, I enjoyed this video very much!
@BekBrace10 ай бұрын
Thank you very much 🙏☺️ Always glad to receive such feedback 🙏
@jdratlif2 жыл бұрын
JWTs have built-in expiration times. Why did you make a custom field? pyJWT will throw an exception for expired token.
@BekBrace2 жыл бұрын
I think I was trying to add more logic, but you’re right it would’ve been better to keep it simple and leave it to pyjwt to handle it 😁
@keycuevasmelgarejo2 жыл бұрын
Great!
@BekBrace2 жыл бұрын
Thank you
@georgesamuel37742 жыл бұрын
Great turtorial bro , keep it up ❤️❤️
@BekBrace2 жыл бұрын
Thank you 🙏
@ahmedqassem43262 жыл бұрын
Thanks man!
@BekBrace2 жыл бұрын
Welcome :)
@ahmedqassem43262 жыл бұрын
@@BekBrace can fastapi be integrated with another language ?
@mawe45852 жыл бұрын
Thanks for the tutorial. Sadly all tutorial about JWT and Authorization in general for FastAPI, leave out the part where you use the user-information in later calls. Like adding the author of the blog-post in this example.
@dab_tube Жыл бұрын
Easy clear and concise
@BekBrace Жыл бұрын
Thank you very much
@amandubey5287 Жыл бұрын
Thank you so much for this, you gained a sub
@BekBrace Жыл бұрын
Thank you so much my friend
@mjavint Жыл бұрын
great course my friend
@BekBrace Жыл бұрын
Thank you very much my friend
@tanjimulislam47622 жыл бұрын
Thank you!
@BekBrace2 жыл бұрын
You are very welcome 🙂
@LearnWithAshiii10 ай бұрын
You have Done a Great Job respect from Pakistan ❤
@BekBrace10 ай бұрын
Thank you very much 🙏😊
@basilihuoma5300 Жыл бұрын
This is super cool, thanks.
@BekBrace Жыл бұрын
Thanks my friend
@kriskrawiec5513 Жыл бұрын
Thanks man, very helpful
@BekBrace Жыл бұрын
You're very welcome
@jcpalumboai12 жыл бұрын
Great video! Thanks
@BekBrace2 жыл бұрын
I'm glad 🙂
@salmoseproverbiosilustrados2 жыл бұрын
I enjoyed a lot. Thanks
@BekBrace2 жыл бұрын
Thank you, Ricardo!
@guruyaya2 жыл бұрын
Nice tutorial. There's one thing I didn't get: on def user_signup(user: UserSchema = Body(default=None)): - I tried it without the Boy default value, and it worked just the same. What's the use of the Body default value there? Thanks in advance
@BekBrace2 жыл бұрын
Hey Yair thanks for your comment. You can delete the default if you want to keep it simple with no extra arguments, that’s why you’ll have the same result; however if the userschema body is set to be a different default value, it will behave differently. I just put it to be visually clear if anyone wants to change the default value.
@guruyaya2 жыл бұрын
@@BekBrace so this helps me to set the default behavior, if no json is sent. Got it.
@STEFFIGEORGE-tw8wz Жыл бұрын
Thank you so much!!!!
@BekBrace Жыл бұрын
You're welcome 🤗
@narutokun50932 жыл бұрын
👏 👏 👏 👏 👏 👏
@BekBrace2 жыл бұрын
Thank you :)
@sziller_eu Жыл бұрын
In the last step, does it give an error if I slightly change the token pasted? Also how can I read data from the token once inside a function?
@CodingByAmp Жыл бұрын
thank you , follower
@BekBrace Жыл бұрын
thank you for watching
@johnniefujita2 жыл бұрын
it is important to mention that on that category the fastest frameworks are around 6x faster than fastapi. But it is indeed fast enough and very fast for python. I have been working in companies migrating their services for fastapi from django and flask mainly
@BekBrace2 жыл бұрын
Oh 6x faster 😯 ? Thanks for the information, Johnnie.
@davidcostigan88162 жыл бұрын
interesting
@erjiaxiao6577 Жыл бұрын
Hi Johnnie, so you mean fastest framework in Java and Go etc. ?
@johnniefujita Жыл бұрын
@@erjiaxiao6577 yes... java, go, rust, c++ and even node frameworks are faster. But we are usually bounded by other factors when dealing with rest api backend servers. So that does not really become a decision factor. At least.
@erjiaxiao6577 Жыл бұрын
@@johnniefujita I see.. I check some benchmark and find that python nowadays could has its position with these contestants. good news for those who like python. thank you for the info!
@hritikcodes8762 жыл бұрын
hey i don't understand the use of Config class in Schemas, can you please explain the benefit of adding Config class in a Schema?
@portiseremacunix2 жыл бұрын
Thanks. I have the 403 error at the last stage to test the JWT bearer. Can I see the source code somewhere?
@BekBrace2 жыл бұрын
Hi Kirby, thanks for commenting Yes, I've added it in the description. Here's the link: github.com/BekBrace/FASTAPI-and-JWT-Authentication
@lerealiste3338 Жыл бұрын
It’s doesn't work. It's getting access to post with random symbols instead token.
@BekBrace Жыл бұрын
It should work, this is odd. Do you have an error message ?
@htwray2 жыл бұрын
HI Bek Brace, this is an excellent tutorial. I am very new in using JWT authentication. Just want to know if there are any token refresh mechanism in pyjwt package? Or any other recommendation on the token refresh ? Thanks in advance!
@BekBrace2 жыл бұрын
Hey 😊👋 thanks for your comment I'm pretty sure there are, I'm gonna check that and be back to you with an answer to your question
@htwray2 жыл бұрын
Thank you for your help! I will also study for it.
@startmusicworld6662 жыл бұрын
Hello Sir, I got this error can u provide solution for this ----->JWT_SECRET = config("secret"), raise UndefinedValueError('{} not found. Declare it as envvar or define a default value.'.format(option)) decouple.UndefinedValueError: secret not found. Declare it as envvar or define a default value.
@BekBrace2 жыл бұрын
Ok, maybe you can download the source code and check out what went wrong? This way you will teach yourself while taking notes ☺️
@amarek58412 жыл бұрын
Very nice 👍 thanks for the good job
@BekBrace2 жыл бұрын
Thanks 🙏
@ndreuh Жыл бұрын
Great video! Say, why do you set Schema = Body() in some functions, what's that for?
@BekBrace Жыл бұрын
For standardization purposes nothing more
@jnone2488 Жыл бұрын
what is the differences between JWT, JOT and access token ? I will wait for the answers pls. Thanks!
@BekBrace Жыл бұрын
Hello my friend. Sure. JWT (JSON Web Token) and JOT (JSON Object Token) are both types of access tokens used for authorization and authentication, while access token is a more general term used for any token that grants access to a protected resource.
@superspamtube7464 Жыл бұрын
After finishing this video my login route doesnt work. But the signup works and I can POST new blog posts and get all and get one post works. I have a import error "Import jwt could not be resolved". I know this video is one year old but maybe you can assist with that.
@BekBrace Жыл бұрын
I will do my best finding the solution 🙂
@carlosvelazquez7979 Жыл бұрын
I found how to verify the correct token within this code
@jimlyjimlesson45022 жыл бұрын
Hi Bek, thanks fr ur lesson. very interesting and a very good speak! But i have an problem and can't find it. If i tried to enter the post with Dependencies, i get alwyas an Error: jwt_bearer.py", line 17, in __call__ raise credentials.credentials TypeError: exceptions must derive from BaseException
@podcastmarhaba2 жыл бұрын
What dependencies are you trying to post with ?
@user-uu3vq5xe9b2 жыл бұрын
Thanks
@BekBrace2 жыл бұрын
Thank you!
@apexyu164 Жыл бұрын
why you need to add Body(default = None) line 66 in 39:55 ? whats the purpose of that ?
@BekBrace Жыл бұрын
Really nothing more than showing how a standard template. You can omit it and it will still work.
@TusharBhut-mk6mn Жыл бұрын
Can you make video on different authentication for both user and admin, Where user authorized can only use [GET] method, while admin authorized can use all the method [crud] ?
@BekBrace Жыл бұрын
Sure
@orlanino Жыл бұрын
What about authorization, please? Also how do you propagate the authentication and authorization to backend microservices?
@kz_cbble96705 ай бұрын
Even if i post the wrong acces token in authorize , it still allows me to post.. what's wrong?
@AcezeroGame5 ай бұрын
I had same issue and turns out we forgot to add verify_jwt in jwt_bearer file. Simply add an if statement below if not credentials statement. Just check if not self.verify_jwt with credentials.credentials.
@md.redwanhossain6288 Жыл бұрын
can you kindly cover refresh token and token blacklisting in another video?
@BekBrace Жыл бұрын
Sure 😊
@bebomohamed8860 Жыл бұрын
thanks alot 🌹🌹
@BekBrace Жыл бұрын
You're welcome 😊
@vfb6265 Жыл бұрын
You miss this code in jwtBearer Class : async def __call__(self, request: Request): [...] if credentials: [....] if not self.verify_jwt(credentials.credentials): raise HTTPException(status_code=403, detail="Message here !") return credentials.credentials else: raise HTTPException(status_code=403,detail="Message here !")
@BekBrace Жыл бұрын
Cheers
@jordixboy2 жыл бұрын
how would u get user_id from the jwt in the controller?
@kiransingh2935 Жыл бұрын
How does fastAPI know to call the verify_jwt function on the handler? Is that some special baked in logic?
@BekBrace Жыл бұрын
Exactly that
@sawojarianski6991 Жыл бұрын
How do You placed sample data "Tiger, Koala, etc. " , Is this a special addon for that functionality ?
@BekBrace Жыл бұрын
But it's clear how i did it in the tutorial
@jasenmackie10282 жыл бұрын
Thanks for the video. Is the code available anywhere? I could not get the token on user signup and not sure why. Would like to compare my code. Thanks!
@BekBrace2 жыл бұрын
Hey Jasen, thanks for commenting. Yes, I've added the source code in the description. Here's the link: github.com/BekBrace/FASTAPI-and-JWT-Authentication
@b20lopez Жыл бұрын
Hi Bek! I am looking for "API KEYS" You know, a key I can provide to customers to they communicate to the backend. I need API keys to deduct credits from their account. Is that the same API KEYS I am looking for? Where I just have to remove the Expiration? I watch a video that API keys can be sniffed.. so I wonder if this is the same API key i am looking to implement
@BekBrace Жыл бұрын
I'll look into this and get back to you
@josetuc2 жыл бұрын
It's a great tutorial, but... HOUSTON WE HAVE A PROBLEM =(( : when I added dependencies=[Depends(jwtBearer())]... In my console I can read this error: TypeError: HTTPBearer.__init__() got an unexpected keyword argument 'auto_Error'... Could you help me please? Thanks a lot
@BekBrace2 жыл бұрын
Hey Gomez 👋 I’ll check it out and will be back to you with an answer to this issue
@josetuc2 жыл бұрын
@@BekBrace thanks a lot my dear friend, you're the Best!!!
@alexandere97232 жыл бұрын
@@BekBrace write is small, auto_error = auto_Error
@jeanleloup22052 жыл бұрын
Thank you for the tutorial it was very good. What about put and delete requests ? Thank you
@BekBrace2 жыл бұрын
Thanks Jean The same as we post, follow the same rules , and as for creating the routes you can check out my FastAPI course, you’ll find your answer there
@user-em6py9hu2o2 жыл бұрын
The api works even though it is not an issued token. I do not know the reason. why...??
@BekBrace2 жыл бұрын
It should work for reading [Get] verb, but not for writing [POST] - is that the case ?
@user-em6py9hu2o2 жыл бұрын
@@BekBrace Both [post] and [get] are the same case.
@MaxoSall3 ай бұрын
I have yet to see any tutorials about actual atheoriaztion and permissions in fastapi
@BekBrace3 ай бұрын
You're welcome
@yashgajewar90192 жыл бұрын
I followed the tutorial but whenever I try to post data I get an error that token is invalid has anyone faced the same issue??
@AiF0 Жыл бұрын
Man can you give me your keyborad's name and great video
@BekBrace Жыл бұрын
Thank you my friend. Keyboard's name is Genesis Thor 300
@razapanjwani65026 ай бұрын
How does the server tell client side that a user is logged in?
@dogaada66192 жыл бұрын
Hello sir, thanks for great tutorial. I would like to ask you about jwtBearer Process. I applied your code in another project but the problem is which value I entered to jwtBearer is not important to authorize the endpoint. I would like to secure my public endpoint with verify_token. Also I created /login endpoint and after a username and password process for authenticate I can get access_token. As I mentioned in above, I would like to use this access_token to authorize in different public endpoints. Would you help me about it?
@BekBrace2 жыл бұрын
Sure i can help. you can use this access_token for auth in different public endpoints. How do you want to start?
@dogaada66192 жыл бұрын
I would like asking about I can secure with token the endpoints ok but the problem is instead of access_token with any value which I enter the authentication point I can authorize the endpoint. Normally I think I have to give an acces_token which I get from the login endpoint, after that I can be authorised the post method which is secured with token. So I confused about that how I could secure with only access_token not any value. Also I looked into source code of you shared, when I apply it to my project. I cannot authorize with access_token and any value
@ickynho72 жыл бұрын
@@dogaada6619 simply add new field key value like role: admin, and a condition if its admin then allow.
@devpriyashivani18559 ай бұрын
Tried multiple times but finally got the error: { "detail": "Invalid token or expired token." }
@BekBrace8 ай бұрын
Oh sorry to hear that, but I can advise you to make sure that your JWT token you are using for authentication is valid and has not expired, make sure to generate a new token if the existing one has expired.
@mycala611 ай бұрын
Can anyone help me out. I have one doubt suppose you have 2 users (student and admin)how to use the generated token during login, only for the student specified tag user I logged in and it's methods and that token should not be able to be used by the admin methods, To perform operations on admin again we need to create token for that.
@BekBrace10 ай бұрын
Hey! You can try to implement role-based access control (RBAC) in your authentication and authorization system for the student and the admin, each of which will have separate tokens and permissions.
@user-wo1qc2hp6z11 ай бұрын
hi bek,if i want to update user information using PUT method of a specific user,how can i use the token that was generated in login and user the same token in PUT method to represent that same user and update only the details of that specific user
@BekBrace11 ай бұрын
Hey, thank you for this question :) Actually, you can update user information using the PUT method for a specific user by the following: 1- Token-Based Authentication: Set up token-based authentication in your FastAPI application. When a user logs in successfully, generate a JWT token and return it to the client. The client should store this token securely. 2- Protect Routes: Protect the routes or endpoints that require authentication and user information updates. Only authenticated users with valid JWT tokens should be able to access these routes. 3- Client-Side: When making a PUT request to update user information, include the JWT token in the request header as an "Authorization" header with the "Bearer" prefix: Authorization: Bearer As far as thee Server-Side (FastAPI), you need to: 1- Authenticate the user: Verify that the provided JWT token is valid and decode it to extract the user's identity (usually the user's ID). 2- Authorize the update: Ensure that the user making the request has the necessary permissions to update the user information. Typically, users can only update their own information, so you should check if the user ID extracted from the token matches the user being updated. 3- Update the user information: If authentication and authorization checks pass, proceed to update the user's information in your database based on the data provided in the PUT request.
@DevArjun2 жыл бұрын
Sir How To Add Current User With Post as well like post : 1, title: snakes, text: they are cool, author: current_user
@earvinjamesdantes58002 жыл бұрын
How will I implement the register with a confirm password?
@BekBrace2 жыл бұрын
With a very simple conditional to check if the pass entered 2nd time == 1st time, then continue; else raiseerror (not identical password ) - that’s the main idea, I’m sure you can search for the syntax
@earvinjamesdantes58002 жыл бұрын
@@BekBrace Ohhhhh I thought you're gonna have to create like a new schema/model with the confirmationPassword as its field. Thank youuuuu!
@enchance Жыл бұрын
Can you do a video on the FastAPI Users package with Google Auth? I think having OAuth2 authentication is something people are really after because of its ease of use.
@BekBrace Жыл бұрын
Yes, i will do that with oauth2 soon
@enchance Жыл бұрын
@@BekBrace Awesome! Will be looking out for it.
@wihanuys Жыл бұрын
Hi @BekBrace, I use this tutorial, but I can enter any string in the authorize window in FastAPI docs and it will accept it as a valid authentication. there must be an error somewhere in the video, could you please verify it
@BekBrace Жыл бұрын
Ok
@wihanuys Жыл бұрын
@@BekBrace Thank you, I copied it excatly, but I can enter any string, into the authorization window, even if it is not a JWT token, and I have access to all the protected routes
@mehul4mak10 ай бұрын
@21.24 how come you are getting I'd 4 and 5 if you are posting Id 0?
@BekBrace10 ай бұрын
Great question. The id 0 in the curl link doesn't necessarily mean the actual id number of the item added, it starts at 0 and increments based on previously added items, in this case as explained I've added cats twice, that's why the GET request showed it twice at I'd 4 and 5.
@BestChan2610 Жыл бұрын
Can you help integrate this into a frontend framework like Svelte?
@BekBrace Жыл бұрын
Don't have much experience with Svelte, sorry
@alwaysdjango Жыл бұрын
Pls how do we identify the authenticated user??
@BekBrace Жыл бұрын
what do you mean by "identify" ?
@alwaysdjango Жыл бұрын
@@BekBrace Like how do you get the authenticated users credenttials from the secured routes.
@arknexter Жыл бұрын
Link to github doesn't work
@BekBrace Жыл бұрын
It is working fine
@arknexter Жыл бұрын
Strange. Now it works
@kz_cbble96705 ай бұрын
37:46
@podcastmarhaba5 ай бұрын
?
@BekBrace5 ай бұрын
Ok .. what ?
@kz_cbble96705 ай бұрын
@@BekBrace sorry i should have added a ignore message.. these are just timestamps for my use
@phatvo27392 жыл бұрын
can you help me doc about authen with social media
@BekBrace2 жыл бұрын
What’s happening ?
@user-ln6hz2nb7o5 ай бұрын
i wish it was more deep
@BekBrace5 ай бұрын
It's as deep as it gets 😉
@amandubey5287 Жыл бұрын
I just have two questions like why are we putting 1) why are we doing this decoded_token["expiry"] >= time.time() 2)Why are we returning the tokens via signJWT() method two times one time via signup and the other time via signup, can you explain that to me
@BekBrace Жыл бұрын
Thanks for your questions, my friend. Answering your questions: 1- The decodeJWT function takes the token and decodes it with the aid of the jwt module and then stores it in a decoded_token variable. So what we want is to return decoded_token if the expiry time is valid which is exactly the answer to your question, otherwise, we return None. 2- In signup, I returned signJWT only once not twice : @app.post("/user/signup", tags=["user"]) async def create_user(user: UserSchema = Body(...)): users.append(user) return signJWT(user.email)