llama-stack-mirror/llama_stack
Derek Higgins fc16b956ba fix: nested claims mapping in OAuth2 token validation
The get_attributes_from_claims function was only checking for top-level
claim keys, causing token validation to fail when using nested claims
like "resource_access.llamastack.roles" (common in Keycloak JWT tokens).

Updated the function to support dot notation for traversing nested claim
structures. Give precedence to dot notation over literal keys with dots
in claims mapping.

Added test coverage.

Closes: #3812

Signed-off-by: Derek Higgins <derekh@redhat.com>
2025-10-17 16:04:16 +01:00
..
apis chore(api)!: BREAKING CHANGE: remove ALL telemetry APIs (#3740) 2025-10-14 13:48:40 -07:00
cli chore!: remove model mgmt from CLI for Hugging Face CLI (#3700) 2025-10-09 16:50:33 -07:00
core fix: nested claims mapping in OAuth2 token validation 2025-10-17 16:04:16 +01:00
distributions refactor: replace default all-MiniLM-L6-v2 embedding model by nomic-embed-text-v1.5 in Llama Stack (#3183) 2025-10-14 10:44:20 -04:00
models chore: remove dead code (#3729) 2025-10-07 20:26:02 -07:00
providers feat: Enable setting a default embedding model in the stack (#3803) 2025-10-14 18:25:13 -07:00
strong_typing chore: refactor (chat)completions endpoints to use shared params struct (#3761) 2025-10-10 15:46:34 -07:00
testing fix(testing): improve api_recorder error messages for missing recordings (#3760) 2025-10-09 15:04:16 -07:00
ui chore(ui-deps): bump lucide-react from 0.542.0 to 0.545.0 in /llama_stack/ui (#3788) 2025-10-11 21:40:48 -04:00
__init__.py chore(rename): move llama_stack.distribution to llama_stack.core (#2975) 2025-07-30 23:30:53 -07:00
env.py refactor(test): move tools, evals, datasetio, scoring and post training tests (#1401) 2025-03-04 14:53:47 -08:00
log.py feat: Add support for Conversations in Responses API (#3743) 2025-10-10 11:57:40 -07:00
schema_utils.py fix(auth): allow unauthenticated access to health and version endpoints (#3736) 2025-10-10 13:41:43 -07:00