We are currently solving the following issue within our repository. Here is the issue text:
--- BEGIN ISSUE ---
New Auth Tokens cannot pass sudo check
The new auth token based API access never passes sudo:

``` python
def is_considered_sudo(request):
    return request.is_sudo() or \
        isinstance(request.auth, ApiKey)
```


--- END ISSUE ---

Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
--- BEGIN FILES ---
Path: `src/sentry/api/decorators.py`
Content:
```
1 from __future__ import absolute_import
2 
3 import json
4 
5 from django.http import HttpResponse
6 from functools import wraps
7 
8 from sentry.models import ApiKey
9 
10 
11 def is_considered_sudo(request):
12     return request.is_sudo() or \
13         isinstance(request.auth, ApiKey)
14 
15 
16 def sudo_required(func):
17     @wraps(func)
18     def wrapped(self, request, *args, **kwargs):
19         # If we are already authenticated through an API key we do not
20         # care about the sudo flag.
21         if not is_considered_sudo(request):
22             # TODO(dcramer): support some kind of auth flow to allow this
23             # externally
24             data = {
25                 "error": "Account verification required.",
26                 "sudoRequired": True,
27                 "username": request.user.username,
28             }
29             return HttpResponse(json.dumps(data), status=401)
30         return func(self, request, *args, **kwargs)
31     return wrapped
32
```
--- END FILES ---

Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.

Here is an example:

```diff
diff --git a/examples/server_async.py b/examples/server_async.py
--- a/examples/server_async.py
+++ b/examples/server_async.py
@@ -313,4 +313,4 @@
 
 
 if __name__ == "__main__":
-    asyncio.run(run_async_server("."), debug=True)
+    asyncio.run(run_async_server(), debug=True)
diff --git a/examples/server_sync.py b/examples/server_sync.py
--- a/examples/server_sync.py
+++ b/examples/server_sync.py
@@ -313,5 +313,5 @@
 
 
 if __name__ == "__main__":
-    server = run_sync_server(".")
+    server = run_sync_server()
     server.shutdown()

```

diff --git a/src/sentry/api/decorators.py b/src/sentry/api/decorators.py
--- a/src/sentry/api/decorators.py
+++ b/src/sentry/api/decorators.py
@@ -5,12 +5,13 @@
 from django.http import HttpResponse
 from functools import wraps
 
-from sentry.models import ApiKey
+from sentry.models import ApiKey, ApiToken
 
 
 def is_considered_sudo(request):
     return request.is_sudo() or \
-        isinstance(request.auth, ApiKey)
+        isinstance(request.auth, ApiKey) or \
+        isinstance(request.auth, ApiToken)
 
 
 def sudo_required(func):

{"golden_diff": "diff --git a/src/sentry/api/decorators.py b/src/sentry/api/decorators.py\n--- a/src/sentry/api/decorators.py\n+++ b/src/sentry/api/decorators.py\n@@ -5,12 +5,13 @@\n from django.http import HttpResponse\n from functools import wraps\n \n-from sentry.models import ApiKey\n+from sentry.models import ApiKey, ApiToken\n \n \n def is_considered_sudo(request):\n     return request.is_sudo() or \\\n-        isinstance(request.auth, ApiKey)\n+        isinstance(request.auth, ApiKey) or \\\n+        isinstance(request.auth, ApiToken)\n \n \n def sudo_required(func):\n", "issue": "New Auth Tokens cannot pass sudo check\nThe new auth token based API access never passes sudo:\n\n``` python\ndef is_considered_sudo(request):\n    return request.is_sudo() or \\\n        isinstance(request.auth, ApiKey)\n```\n\n", "before_files": [{"content": "from __future__ import absolute_import\n\nimport json\n\nfrom django.http import HttpResponse\nfrom functools import wraps\n\nfrom sentry.models import ApiKey\n\n\ndef is_considered_sudo(request):\n    return request.is_sudo() or \\\n        isinstance(request.auth, ApiKey)\n\n\ndef sudo_required(func):\n    @wraps(func)\n    def wrapped(self, request, *args, **kwargs):\n        # If we are already authenticated through an API key we do not\n        # care about the sudo flag.\n        if not is_considered_sudo(request):\n            # TODO(dcramer): support some kind of auth flow to allow this\n            # externally\n            data = {\n                \"error\": \"Account verification required.\",\n                \"sudoRequired\": True,\n                \"username\": request.user.username,\n            }\n            return HttpResponse(json.dumps(data), status=401)\n        return func(self, request, *args, **kwargs)\n    return wrapped\n", "path": "src/sentry/api/decorators.py"}], "after_files": [{"content": "from __future__ import absolute_import\n\nimport json\n\nfrom django.http import HttpResponse\nfrom functools import wraps\n\nfrom sentry.models import ApiKey, ApiToken\n\n\ndef is_considered_sudo(request):\n    return request.is_sudo() or \\\n        isinstance(request.auth, ApiKey) or \\\n        isinstance(request.auth, ApiToken)\n\n\ndef sudo_required(func):\n    @wraps(func)\n    def wrapped(self, request, *args, **kwargs):\n        # If we are already authenticated through an API key we do not\n        # care about the sudo flag.\n        if not is_considered_sudo(request):\n            # TODO(dcramer): support some kind of auth flow to allow this\n            # externally\n            data = {\n                \"error\": \"Account verification required.\",\n                \"sudoRequired\": True,\n                \"username\": request.user.username,\n            }\n            return HttpResponse(json.dumps(data), status=401)\n        return func(self, request, *args, **kwargs)\n    return wrapped\n", "path": "src/sentry/api/decorators.py"}]}