llama-stack-mirror/llama_stack
Derek Higgins 1f38359d95
fix: nested claims mapping in OAuth2 token validation (#3814)
fix: nested claims mapping in OAuth2 token validation
    
The get_attributes_from_claims function was only checking for top-level
claim keys, causing token validation to fail when using nested claims
like "resource_access.llamastack.roles" (common in Keycloak JWT tokens).
    
Updated the function to support dot notation for traversing nested claim
structures. Give precedence to dot notation over literal keys with dots
in claims mapping.
    
Added test coverage.
    
Closes: #3812

Signed-off-by: Derek Higgins <derekh@redhat.com>
2025-10-20 12:34:55 -07:00
..
apis docs: update docstrings for better formatting (#3838) 2025-10-17 10:41:50 -07:00
cli refactor(build): rework CLI commands and build process (1/2) (#2974) 2025-10-17 19:52:14 -07:00
core fix: nested claims mapping in OAuth2 token validation (#3814) 2025-10-20 12:34:55 -07:00
distributions chore: update doc (#3857) 2025-10-20 10:33:21 -07:00
models chore: remove dead code (#3729) 2025-10-07 20:26:02 -07:00
providers chore: disable telemetry if otel endpoint isn't set (#3859) 2025-10-20 11:42:57 -07:00
strong_typing chore: refactor (chat)completions endpoints to use shared params struct (#3761) 2025-10-10 15:46:34 -07:00
testing feat(ci): add support for docker:distro in tests (#3832) 2025-10-16 19:33:13 -07:00
ui chore(ui-deps): bump jest and @types/jest in /llama_stack/ui (#3853) 2025-10-18 21:57:57 -04:00
__init__.py chore(rename): move llama_stack.distribution to llama_stack.core (#2975) 2025-07-30 23:30:53 -07:00
env.py refactor(test): move tools, evals, datasetio, scoring and post training tests (#1401) 2025-03-04 14:53:47 -08:00
log.py feat: Add support for Conversations in Responses API (#3743) 2025-10-10 11:57:40 -07:00
schema_utils.py fix(auth): allow unauthenticated access to health and version endpoints (#3736) 2025-10-10 13:41:43 -07:00