Prevent propagation of scopes on non-security sub-dependencies

[DurandA]

In #2945 the behavior of cache keys was changed. The scopes are passed to every dependencies down the tree, including when these dependencies are not Security.

This results in undesired behaviors when a dependency such as a DB session is created twice, e.g.:

@app.patch("/me")
def update_current_user(
    user: UserUpdate,
    current_user: User = Security(get_current_user, scopes=["user:write"]),
    session: Session = Depends(get_session),
):
    pass

[qmorek]

Hi @tiangolo,
is there any chance for this to be merged?

[YuriiMotov]

I see a problem in this implementation.
I described it in the discussion here
Let's discuss it there

[github-actions]

This pull request has a merge conflict that needs to be resolved.

[tiangolo]

Thanks for the discussion and effort here! 🍰

This should be solved by #14419, released in FastAPI 0.123.0 🎉

I'll close this one now. ☕