Can OAuth login via Json data instead of Form?

[LouisYZK]

Description

I want to use the jwt auth, and learn the tutorial about it. There are sth confused me:

@router.post('/token')
async def login(form_data: OAuth2PasswordRequestForm = Depends()):
    user = await authenticate_user(form_data.username, form_data.password)
    if not user:
        raise HTTPException(status_code=400, detail='incorrect username')
    access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
    access_token = await create_access_token(data={'sub': user.username}, expires_delta=access_token_expires)
    return {'access_token': access_token, 'token_type': 'bearer'}

If login success, the token will be returned , and next time you send other request need auth like

oauth2_scheme = OAuth2PasswordBearer(tokenUrl='/token')
async def get_current_user(token: str=Depends(oauth2_scheme)):
    pass

• How does it works the next request was added a header with Authorization: Bear automically? Where does the token returned stored?
• When I replace the Form with json, the following requests after login are failing to be with Auth Header

async def login(user_data: schemas.UserLogin):
    pass

I am sorry about my English and less experience about auth in Web, wish you could solve my confusion. Thanks in advance.

[dmig-alarstudios]

Look inside the OAuth2PasswordRequestForm -- form fields are described there. You can replace this class with your own, accepting application/json instead of application/x-www-form-urlencoded.

[tiangolo]

Thanks for the help here @dmig-alarstudios ! 👏 🙇

Thanks for reporting back and closing the issue @LouisYZK 👍

[bartwroblewski]

If one makes a custom class as per @dmig-alarstudios suggestion, is it possible to also (auto-)update the OAuth Swagger form to use application/json instead of www-form-urlencoded?

[dmig-alarstudios]

@bartwroblewski I couldn't find a solution for that ended up with a duplicate endpoint accepting www-form-urlencoded

[yashp280793]

@dmig-alarstudios I have a requirement where frontend is posting content using content-type = "application/json". Due to OAuth2PasswordRequestForm,I am getting error as "username field required".

Is there a way to add support of application/json or any middleware to convert incoming json to www-form-urlencoded?
I am in situation that either frontend works (with custom class) or swagger works with OAuth2PasswordRequestForm.