prompt: We are currently solving the following issue within our repository. Here is the issue text:
  --- BEGIN ISSUE ---
  New Auth Tokens cannot pass sudo check
  The new auth token based API access never passes sudo:
  
  ``` python
  def is_considered_sudo(request):
      return request.is_sudo() or \
          isinstance(request.auth, ApiKey)
  ```
  
  
  --- END ISSUE ---
  
  Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
  --- BEGIN FILES ---
  Path: `src/sentry/api/decorators.py`
  Content:
  ```
  1 from __future__ import absolute_import
  2 
  3 import json
  4 
  5 from django.http import HttpResponse
  6 from functools import wraps
  7 
  8 from sentry.models import ApiKey
  9 
  10 
  11 def is_considered_sudo(request):
  12     return request.is_sudo() or \
  13         isinstance(request.auth, ApiKey)
  14 
  15 
  16 def sudo_required(func):
  17     @wraps(func)
  18     def wrapped(self, request, *args, **kwargs):
  19         # If we are already authenticated through an API key we do not
  20         # care about the sudo flag.
  21         if not is_considered_sudo(request):
  22             # TODO(dcramer): support some kind of auth flow to allow this
  23             # externally
  24             data = {
  25                 "error": "Account verification required.",
  26                 "sudoRequired": True,
  27                 "username": request.user.username,
  28             }
  29             return HttpResponse(json.dumps(data), status=401)
  30         return func(self, request, *args, **kwargs)
  31     return wrapped
  32
  ```
  --- END FILES ---
  
  Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.
  
  Here is an example:
  
  ```diff
  diff --git a/examples/server_async.py b/examples/server_async.py
  --- a/examples/server_async.py
  +++ b/examples/server_async.py
  @@ -313,4 +313,4 @@
   
   
   if __name__ == "__main__":
  -    asyncio.run(run_async_server("."), debug=True)
  +    asyncio.run(run_async_server(), debug=True)
  diff --git a/examples/server_sync.py b/examples/server_sync.py
  --- a/examples/server_sync.py
  +++ b/examples/server_sync.py
  @@ -313,5 +313,5 @@
   
   
   if __name__ == "__main__":
  -    server = run_sync_server(".")
  +    server = run_sync_server()
       server.shutdown()
  
  ```
  
golden_diff: diff --git a/src/sentry/api/decorators.py b/src/sentry/api/decorators.py
  --- a/src/sentry/api/decorators.py
  +++ b/src/sentry/api/decorators.py
  @@ -5,12 +5,13 @@
   from django.http import HttpResponse
   from functools import wraps
   
  -from sentry.models import ApiKey
  +from sentry.models import ApiKey, ApiToken
   
   
   def is_considered_sudo(request):
       return request.is_sudo() or \
  -        isinstance(request.auth, ApiKey)
  +        isinstance(request.auth, ApiKey) or \
  +        isinstance(request.auth, ApiToken)
   
   
   def sudo_required(func):
  
verification_info: {"golden_diff": "diff --git a/src/sentry/api/decorators.py b/src/sentry/api/decorators.py\n--- a/src/sentry/api/decorators.py\n+++ b/src/sentry/api/decorators.py\n@@ -5,12 +5,13 @@\n from django.http import HttpResponse\n from functools import wraps\n \n-from sentry.models import ApiKey\n+from sentry.models import ApiKey, ApiToken\n \n \n def is_considered_sudo(request):\n     return request.is_sudo() or \\\n-        isinstance(request.auth, ApiKey)\n+        isinstance(request.auth, ApiKey) or \\\n+        isinstance(request.auth, ApiToken)\n \n \n def sudo_required(func):\n", "issue": "New Auth Tokens cannot pass sudo check\nThe new auth token based API access never passes sudo:\n\n``` python\ndef is_considered_sudo(request):\n    return request.is_sudo() or \\\n        isinstance(request.auth, ApiKey)\n```\n\n", "before_files": [{"content": "from __future__ import absolute_import\n\nimport json\n\nfrom django.http import HttpResponse\nfrom functools import wraps\n\nfrom sentry.models import ApiKey\n\n\ndef is_considered_sudo(request):\n    return request.is_sudo() or \\\n        isinstance(request.auth, ApiKey)\n\n\ndef sudo_required(func):\n    @wraps(func)\n    def wrapped(self, request, *args, **kwargs):\n        # If we are already authenticated through an API key we do not\n        # care about the sudo flag.\n        if not is_considered_sudo(request):\n            # TODO(dcramer): support some kind of auth flow to allow this\n            # externally\n            data = {\n                \"error\": \"Account verification required.\",\n                \"sudoRequired\": True,\n                \"username\": request.user.username,\n            }\n            return HttpResponse(json.dumps(data), status=401)\n        return func(self, request, *args, **kwargs)\n    return wrapped\n", "path": "src/sentry/api/decorators.py"}], "after_files": [{"content": "from __future__ import absolute_import\n\nimport json\n\nfrom django.http import HttpResponse\nfrom functools import wraps\n\nfrom sentry.models import ApiKey, ApiToken\n\n\ndef is_considered_sudo(request):\n    return request.is_sudo() or \\\n        isinstance(request.auth, ApiKey) or \\\n        isinstance(request.auth, ApiToken)\n\n\ndef sudo_required(func):\n    @wraps(func)\n    def wrapped(self, request, *args, **kwargs):\n        # If we are already authenticated through an API key we do not\n        # care about the sudo flag.\n        if not is_considered_sudo(request):\n            # TODO(dcramer): support some kind of auth flow to allow this\n            # externally\n            data = {\n                \"error\": \"Account verification required.\",\n                \"sudoRequired\": True,\n                \"username\": request.user.username,\n            }\n            return HttpResponse(json.dumps(data), status=401)\n        return func(self, request, *args, **kwargs)\n    return wrapped\n", "path": "src/sentry/api/decorators.py"}]}