Support fastapi >= 0.137 (#929)

- fix add_route_dependencies to support FastAPI >= 0.137 by recursively unwrapping _IncludedRouter objects

Author: jonhealy1

CHANGES.md

@@ -17,6 +17,7 @@
 ### Fixed
 
 - fix mypy type errors in transaction extension for Python 3.14 compatibility (mypy 1.20.0) ([#895](https://github.com/stac-utils/stac-fastapi/pull/895))
+- fix `add_route_dependencies` to support FastAPI >= 0.137 by recursively unwrapping `_IncludedRouter` objects ([#929](https://github.com/stac-utils/stac-fastapi/pull/929))
 
 ## [6.2.1] - 2026-02-10
 

stac_fastapi/api/stac_fastapi/api/routes.py

@@ -83,6 +83,45 @@ class Scope(TypedDict, total=False):
     type: Optional[str]
 
 
+def _is_endpoint_route(route: BaseRoute) -> bool:
+    """Check if route is a standard endpoint (not a mount or sub-router)."""
+    return (
+        hasattr(route, "path") and hasattr(route, "methods") and route.methods is not None
+    )
+
+
+def _apply_dependencies_to_route(
+    route: BaseRoute, scopes: List[Scope], dependencies: List[params.Depends]
+) -> None:
+    """Apply dependencies to a single route matching the given scopes."""
+    for scope in scopes:
+        _scope = copy.deepcopy(scope)
+
+        if scope["path"] == "*":
+            _scope["path"] = route.path  # type: ignore
+
+        if scope["method"] == "*":
+            _scope["method"] = list(route.methods)[0]  # type: ignore
+
+        match, _ = route.matches({"type": "http", **_scope})
+        if match != Match.FULL:
+            continue
+
+        if not hasattr(route, "dependant"):
+            continue
+
+        for depends in dependencies[::-1]:
+            route.dependant.dependencies.insert(
+                0,
+                get_parameterless_sub_dependant(
+                    depends=depends,
+                    path=route.path_format,  # type: ignore
+                ),
+            )
+
+        route.dependencies.extend(dependencies)  # type: ignore
+
+
 def add_route_dependencies(
     routes: List[BaseRoute], scopes: List[Scope], dependencies: List[params.Depends]
 ) -> None:
@@ -96,48 +135,19 @@ def add_route_dependencies(
     Returns:
         None
     """
-    for scope in scopes:
-        _scope = copy.deepcopy(scope)
-        for route in routes:
-            if scope["path"] == "*":
-                # NOTE: ignore type, because BaseRoute has no "path" attribute
-                # but APIRoute does.
-                _scope["path"] = route.path  # type: ignore
-
-            # NOTE: ignore type, because BaseRoute has no "method" attribute
-            # but APIRoute does.
-            if scope["method"] == "*":
-                _scope["method"] = list(route.methods)[0]  # type: ignore
-
-            match, _ = route.matches({"type": "http", **_scope})
-            if match != Match.FULL:
-                continue
-
-            # Ignore paths without dependants, e.g. /api, /api.html, /docs/oauth2-redirect
-            if not hasattr(route, "dependant"):
-                continue
-
-            # Mimicking how APIRoute handles dependencies:
-            # https://github.com/tiangolo/fastapi/blob/1760da0efa55585c19835d81afa8ca386036c325/fastapi/routing.py#L408-L412
-            for depends in dependencies[::-1]:
-                route.dependant.dependencies.insert(
-                    0,
-                    get_parameterless_sub_dependant(
-                        # NOTE: ignore type, because BaseRoute has no "path_format"
-                        # attribute but APIRoute does.
-                        depends=depends,
-                        path=route.path_format,  # type: ignore
-                    ),
-                )
-
-            # Register dependencies directly on route so that they aren't ignored if
-            # the routes are later associated with an app (e.g.
-            # app.include_router(router))
-            # https://github.com/tiangolo/fastapi/blob/58ab733f19846b4875c5b79bfb1f4d1cb7f4823f/fastapi/applications.py#L337-L360
-            # https://github.com/tiangolo/fastapi/blob/58ab733f19846b4875c5b79bfb1f4d1cb7f4823f/fastapi/routing.py#L677-L678
-            # NOTE: ignore type, because BaseRoute has no "dependencies" attribute
-            # but APIRoute does.
-            route.dependencies.extend(dependencies)  # type: ignore
+    for route in routes:
+        if hasattr(route, "original_router"):
+            add_route_dependencies(route.original_router.routes, scopes, dependencies)
+            continue
+
+        if hasattr(route, "routes") and route.routes:
+            add_route_dependencies(route.routes, scopes, dependencies)
+            continue
+
+        if not _is_endpoint_route(route):
+            continue
+
+        _apply_dependencies_to_route(route, scopes, dependencies)
 
 
 def add_direct_response(app: FastAPI) -> None: