The garbage collector warning since AuthenticationBackend enabled.

[NightSkySK]

I'm pretty sure my issue is related to my code and Python skills, however, I'm struggling to find the correct way. I hope that the community here can help me.

my authenticate_user function require session:

async def authenticate_user(
    username: str,
    password: str,
    session: AsyncSession = Depends(get_async_session),
):
    user = await get_user(username=username, session=session)
    # print(user)
    if not user:
        return False
    if not Hasher.verify_password(password, user.hashed_password):
        return False
    return user

normally in endpoint, I do and it doesn't cause any Garbage collector warning.

@router.post("/token", response_model=Token)
async def login_for_access_token(
    response: Response,
    form_data: OAuth2PasswordRequestForm = Depends(),
    session: AsyncSession = Depends(get_async_session),
):
    user = await authenticate_user(form_data.username, form_data.password, session)

How ever in login function have take request as instance variable, so I need to call take session within the function, which only way I found it would work is following:

class AdminAuth(AuthenticationBackend):
    async def login(
        self,
        request: Request,
    ) -> bool:
        form = await request.form()
        username, password = form["username"], form["password"]
        print("username is", username)
        print("password is", password)
        user = await authenticate_user(
            username, password, session=async_session_maker()
        )
        if not user:
            raise HTTPException(
                status_code=status.HTTP_401_UNAUTHORIZED,
                detail="Incorrect username or password",
            )
        if not user.superuser:
            raise HTTPException(
                status_code=status.HTTP_401_UNAUTHORIZED,
                detail="You are not permitted!!!",
            )
        admin_token_expires = timedelta(minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES)
        admin_token = create_access_token(
            data={"sub": user.email}, expires_delta=admin_token_expires
        )
        print("access token is ", admin_token)
        request.session.update({"admin_token": admin_token})
        return True

And this is how I get session:

SQLALCHEMY_DATABASE_URL = "sqlite+aiosqlite:///./sql_app.sqlite"
engine = create_async_engine(
    SQLALCHEMY_DATABASE_URL, connect_args={"check_same_thread": False}
)

async_session_maker = async_sessionmaker(
    engine,
    expire_on_commit=False,
)


async def get_async_session() -> AsyncGenerator[AsyncSession, None]:
    async with async_session_maker() as session:
        try:
            yield session
        finally:
            await session.close()

I ve added the finally: await session close() as solution to that, but it doesn't solve my garbage collector warning. Can you suggest me something?