Use 401 with WWW-Authenticate for OAuth2 and scope_str

[tiangolo]

✨ Use 401 UNAUTHORIZED status codes with WWW-Authenticate headers for OAuth2 with bearer tokens.

Update, improve and simplify all the security docs.

Add scope_str to SecurityScopes to simplify injecting it in WWW-Authenticate headers.

Update tests.

[codecov]

Codecov Report

Merging #188 into master will not change coverage.
The diff coverage is 100%.

@@          Coverage Diff          @@
##           master   #188   +/-   ##
=====================================
  Coverage     100%   100%           
=====================================
  Files         170    170           
  Lines        4092   4122   +30     
=====================================
+ Hits         4092   4122   +30

Impacted Files	Coverage Δ
docs/src/security/tutorial003.py	100% <100%> (ø)	⬆️
...ts/test_tutorial/test_security/test_tutorial003.py	100% <100%> (ø)	⬆️
...ts/test_tutorial/test_security/test_tutorial005.py	100% <100%> (ø)	⬆️
docs/src/security/tutorial001.py	100% <100%> (ø)	⬆️
docs/src/security/tutorial005.py	100% <100%> (ø)	⬆️
fastapi/security/oauth2.py	100% <100%> (ø)	⬆️
...ts/test_tutorial/test_security/test_tutorial001.py	100% <100%> (ø)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 9a9bfd7...04d2d4a. Read the comment docs.