Protect API docs behind authentication? · Issue #364 · fastapi/fastapi
Basic Question Does FastAPI provide a method for implementing authentication middleware or similar on the docs themselves (e.g. to protect access to /docs and /redoc)? Additional context My company...
GitHub · github.com [1]
You can protect your fastapi [2] docs behind auth so that not only can certain roles not run certain routes, but they cannot even see the docs at all. This way no one that shouldn’t be poking around can even discover routes they shouldn’t be using.
Here is the soluteion provided by @kennylajara [3]
from fastapi import FastAPI
from fastapi.openapi.docs import get_redoc_html, get_swagger_ui_html
from fastapi.openapi.utils import get_openapi
import secrets
from fastapi import Depends, FastAPI, HTTPException, status
from fastapi.security import HTTPBasic, HTTPBasicCredentials
app = FastAPI(
title="FastAPI",
version="0.1.0",
docs_url=None,
redoc_url=None,
openapi_url = None,
)
security = HTTPBasic()
def get_current_username(credentials: HTTPBasicCredentials = Depends(security)):
correct_username = secrets.compare_digest(credentials.username, "user")
correct_password = secrets...
Posts tagged: thought
All posts with the tag "thought"
871 posts
latest post 2026-06-01
Publishing rhythm
Cancel subscriptions
Cancel subscriptions immediately or at the end of the subscription period with proration options, invoice handling, and automatic cancellation after failed payment attempts.
stripe.com [1]
This is a handy guide to cancelling stripe subscriptions.
# Set your secret key. Remember to switch to your live secret key in production.
# See your keys here: https://dashboard.stripe.com/apikeys
import stripe
stripe.api_key = "sk_test_51ODvHtB26msLKqCAPBAo1qkBBuIfT5tQBX6YFWCLMsPixIExxITCRVa9tNCIqkdQS8olhR79NYXsFWBPKsM3LbGO00zEcNQfNI"
stripe.Subscription.modify(
"sub_49ty4767H20z6a",
cancel_at_period_end=True,
)
You can even inverse it by flipping True to False and re activate the subscription.
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://stripe.com/docs/billing/subscriptions/cancel#canceling
[2]: /thoughts/
External Link
stripe.com [1]
You can find your customers next billing date through the stripe api by using Invoice. and passing in customer, customer_details, subscription, or schedule.
import stripe
stripe.api_key = "sk_test_51ODvHtB26msLKqCAPBAo1qkBBuIfT5tQBX6YFWCLMsPixIExxITCRVa9tNCIqkdQS8olhR79NYXsFWBPKsM3LbGO00zEcNQfNI"
invoice = stripe.Invoice.upcoming(customer="cus_NeZwdNtLEOXuvB")
Within the invoice, you can find the next_payment_attempt as a epoch.
date = datetime.fromtimestamp(invoice.next_payment_attempt)
amount = invoice.amount_due
currency = invoice.currency
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://stripe.com/docs/api/invoices/upcoming
[2]: /thoughts/
Search
Use the search APIs to look up and retrieve objects in your Stripe data. Using search is a faster alternative to paginating through all resources.
stripe.com [1]
Stripe has it’s own query language for querying data. I’m just getting into using it and it seems pretty good so far. I needed to lookup the price for products. I was able to find prices for my product using the python api as shown below.
stripe.Price.search(query="active: 'true' and product: 'prod_P8SfwtxJ45cWE2'")
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://stripe.com/docs/search#search-query-language
[2]: /thoughts/
stripe-keys-and-ids.tsv [1]
tsv
Prefix Description Notes
ac_ Platform Client ID Identifier for an auth code/client id.
acct_ Account ID Identifier for an Account object.
aliacc_ Alipay Account ID Identifier for an Alipay account.
ba_ Bank Account ID Identifier for a Bank Account object.
btok_ Bank Token ID Identifier for a Bank Token object.
card_ Card ID Identifier for a Card object.
cbtxn_ Customer Balance Transaction ID Identifier for a Customer Balance Transaction object.
ch_ Charge ID Identifier for a Charge object.
cn_ Credit Note ID Identifier for a Credit Note object.
cs_live_ Live Checkout Session ID Identifier for a checkout Session object in live mode.
cs_test_ Test Checkout Session ID Identifier for a checkout Session object in test mode.
cus_ Customer ID Identifier for a Customer object.
dp_ Dispute ID Identifier for a Dispute object.
evt_ Event ID Identifier for an Event object.
fee_ Application Fee ID Identifier for an Application Fee object.
file_ File ID Identifier for a File object.
fr_ Application Fee Refund ID Identifier for an Application Fee Refund object.
iauth_ Issuing Authorization ID Identifier for an Issuing Authorization object.
ic_ Issuing Card ID ...
External Link
youtube.com [1]
Dang this is such a good message. I can’t exactly relate to being forced into the overworking situation that PirateSofware is talking about. I can relate to being conditioned to feeling a certain way and changing that is very difficult. I can also relate to not feeling like I am getting enough done in the day. Sometimes a bit of separation is good.
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://www.youtube.com/shorts/IVdaysrIS74
[2]: /thoughts/
External Link
stackoverflow.com [1]
Get those print colors exact
body{
-webkit-print-color-adjust:exact !important;
print-color-adjust:exact !important;
}
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://stackoverflow.com/questions/3893986/css-media-print-issues-with-background-color#answer-14784655
[2]: /thoughts/
page-break-after CSS property - CSS | MDN
The page-break-after CSS property adjusts page breaks after the current element.
MDN Web Docs · developer.mozilla.org [1]
I’m working on something that might go to print, so I want the page breaks to happen somewhat in my control as the content author. As I do my writing I break my content up in to many short sections using h2, sometimes an h3. These are generally short sections that go together, should stay together, and typically are not too lengthy to cause a large white space in print.
I found a way in css to only allow page breaks to happen on h2 and h3, and it turned out perfect, suck it WSIWIG editors
* {
page-break-before: avoid;
}
h2,
h3 {
page-break-before: auto;
}
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://developer.mozilla.org/en-US/docs/Web/CSS/page-break-after
[2]: /thoughts/
Go by Example
gobyexample.com [1]
Fantastic resource for learning go. You work through small examples quickly, learning single concepts along the way.
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://gobyexample.com/
[2]: /thoughts/
How to Build a Website or App - Syntax #696
This podcast episode covers a wide range of topics related to building a website or web application from start to finish.
syntax.fm [1]
Great tips in this one. They discuss everything from front end to backend, databases and ORMS, here are a few of my favorite points.
- Use good data or good fake data
- make it have some variation like long and short text
- Don’t use a database if you need one, static content is eaiser to manage
- end to end test, (does the site load page x)
- You DONT NEED all this complexity, you can deploy a site with HTML [2] and CSS.
Note
This post is a thought [3]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://syntax.fm/show/696/how-to-build-a-website-or-app
[2]: /html/
[3]: /thoughts/
[1]@willmcgugan [1]) on X — Just a wee thing that came up today. I think this is kind of neat. https://t.co/Un8FRz2TSJ" loading="lazy">
Will McGugan (@willmcgugan [2]) on X
Just a wee thing that came up today. I think this is kind of neat. https://t.co/Un8FRz2TSJ
X (formerly Twitter) · twitter.com
Textual is so sick, Will just made a live markdown editor in the terminal!
Note
This post is a thought [3]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://twitter.com/willmcgugan/status/1729158038551220477
[2]: https://willmcgugan.github.io
[3]: /thoughts/
[1]https://t.co/YWi0i665VO" [1] loading=“lazy”>
Sebastián Ramírez (@tiangolo) on X
Now @FastAPI [2] has 65k+ GitHub stars! ✨🎉
Since today, FastAPI has a few more GitHub stars than Flask. 🤯
Now FastAPI is the second most starred Python web framework, right after Django. 🥈…
X (formerly Twitter) · twitter.com
Fastapi passes flask in GitHub stars!
[1]
Note
This post is a thought [3]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://twitter.com/tiangolo/status/1729153717956715007
[2]: /fastapi/
[3]: /thoughts/
-
Nice take by @t3dotgg [1]. Some of the old patterns that go deep into webdev, MVC, separation of concerns, REST, are things we are told to believe on day one, thrown so many things, no mental bandwidth, or experience to form our own opinions we must take them as fact. Rarely do we take these facts and revisit them with our new understandings years later.
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://twitter.com/t3dotgg
[2]: /thoughts/
DoomponyLewis 🦄 (@DoomponyLewis) on X
@wtravishubbard Management is abhorrent to me
X (formerly Twitter) · twitter.com [1]
Today I learned the meaning of abhorrent
abhorrent
ăb-hôr′ənt, -hŏr′-
adjective
Disgusting, loathsome, or repellent.
Feeling repugnance or loathing.
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://twitter.com/pypeaday/status/1727156823185113304
[2]: /thoughts/
Heroicons
Beautiful hand-crafted SVG icons, by the makers of Tailwind CSS.
Heroicons · heroicons.com [1]
heroicons is a really nice set of many of the basic icons that you will need for building nice ui’s. They have a really nice copy as svg or jsx button, so that you can just yank it and paste it on your page without any extra packages or installation.
Note
This post is a thought [2]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://heroicons.com/
[2]: /thoughts/
Uptime Kuma
A self-hosted monitoring tool
uptime.kuma.pet [1]
Uptime kuma is a fantastic self hosted [2] monitoring tool. One docker run command and you are up and running. Once you are in you have full control over checking status of urls, frequency, allowed timeouts, and a HUGE list of notification providers
docker run -d --restart=always -p 3001:3001 -v uptime-kuma:/app/data --name uptime-kuma louislam/uptime-kuma:1
I deployed it in my homelab [3] today.
[4]
Note
This post is a thought [5]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://uptime.kuma.pet/
[2]: /self-host/
[3]: /homelab/
[4]: https://twitter.com/_WaylonWalker/status/1723077941649707468
[5]: /thoughts/
kv - Command | Vault | HashiCorp Developer
The "kv" command groups subcommands for interacting with Vault's key/value
secret engine.
kv - Command | Vault | HashiCorp Developer · developer.hashicorp.com [1]
hashi vault lets you manage secrets right from your cli.
# set your vault url
export VAULT_ADDR=https://myvault.mydomain
vault login
# get a secret
vault kv get secret/hvac
# put a secret
vault kv put -mount=secret creds passcode=my-long-passcode
# get it
vault kv get secret/creds
# == Secret Path ==
# secret/data/creds
#
# ======= Metadata =======
# Key Value
# --- -----
# created_time 2023-11-05T02:53:40.978120001Z
# custom_metadata <nil>
# deletion_time n/a
# destroyed false
# version 3
#
# ====== Data ======
# Key Value
# --- -----
# bar baz
# passcode my-long-passcode
# get one field
vault kv get -field=passcode secret/creds
# my-long-passcode
vault kv put -mount=secret creds bar=baz
# set more keys
vault kv put -mount=secret creds passcode=my-long-passcode bar=baz
#
# == Secret Path ==
# secret/data/creds
#
# ======= Metadata =======
# Key Value
# --- -----
# created_time 2023-11-05T03:24:14.65958906Z
# custom_metadata <nil>
# deletion_time n/a
# destroyed fa...
GitHub - johanhaleby/kubetail: Bash script to tail Kubernetes logs from multiple pods at the same time
Bash script to tail Kubernetes logs from multiple pods at the same time - johanhaleby/kubetail
GitHub · github.com [1]
Kubetail is a pretty sick bash script that allows you to tail logs for multiple pods in one stream. Very handy when you have more than one replica running.
wget https://raw.githubusercontent.com/johanhaleby/kubetail/master/kubetail
chmod u+x ./kubetail
Now with kubetail I can tail all the logs for every shot-wayl-one pod in the shot namespace.
./kubetail shot-wayl-one -n shot
[2]
Note
This post is a thought [3]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://github.com/johanhaleby/kubetail
[2]: https://screenshots.waylonwalker.com/kubetail.png
[3]: /thoughts/
-
I am converting my docker compose env secrets over to k8s secrets. This guide was clear and to the point how I can replicate this exact workflow.
First set the secret, the easiest way is to use kubectl wtih –from-literal because it automatically base64 encodes for you.
kubectl create secret generic minio-access-key --from-literal=ACCESS_KEY=7FkTV**** -n shot
If you don’t use the --from-literal you will have to base64 encode it.
echo "7FkTV****" | openssl base64
Once you have your secret deployed, you have to update the container spec in your deployment manifest to get the valueFrom secretKeyRef.
spec:
containers:
- env:
- name: ACCESS_KEY
valueFrom:
secretKeyRef:
key: ACCESS_KEY
name: minio-access-key
- name: SECRET_KEY
valueFrom:
secretKeyRef:
key: SECRET_KEY
name: minio-secret-key
image: registry.wayl.one/shot-scraper-api
name: shot-wayl-one
ports:
- containerPort: 5000
protocol: TCP
resources: {}
restartPolicy: Always
Note
This post is a thought [1]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: /thoughts/
waylon walker (@_WaylonWalker) on X
Which is more complicated
X (formerly Twitter) · twitter.com [1]
Wow, shocked at these results. All this time I’ve been told and believed that k8s is incredibly hard, and you need a $1M problem before you think about it because it will take a $1M team to maintain it. So far my experience has been good, and I definitely do not have a $1M problem in my homelab [2].
[1]
Note
This post is a thought [3]. It’s a short note that I make
about someone else’s content online #thoughts
References:
[1]: https://twitter.com/_WaylonWalker/status/1718300097174270193
[2]: /homelab/
[3]: /thoughts/