llama-stack-mirror/tests/unit/server
Derek Higgins fc16b956ba fix: nested claims mapping in OAuth2 token validation
The get_attributes_from_claims function was only checking for top-level
claim keys, causing token validation to fail when using nested claims
like "resource_access.llamastack.roles" (common in Keycloak JWT tokens).

Updated the function to support dot notation for traversing nested claim
structures. Give precedence to dot notation over literal keys with dots
in claims mapping.

Added test coverage.

Closes: #3812

Signed-off-by: Derek Higgins <derekh@redhat.com>
2025-10-17 16:04:16 +01:00
..
test_access_control.py chore(rename): move llama_stack.distribution to llama_stack.core (#2975) 2025-07-30 23:30:53 -07:00
test_auth.py fix: nested claims mapping in OAuth2 token validation 2025-10-17 16:04:16 +01:00
test_auth_github.py chore(rename): move llama_stack.distribution to llama_stack.core (#2975) 2025-07-30 23:30:53 -07:00
test_cors.py feat: Add CORS configuration support for server (#3201) 2025-08-21 14:23:27 -07:00
test_quota.py chore(rename): move llama_stack.distribution to llama_stack.core (#2975) 2025-07-30 23:30:53 -07:00
test_replace_env_vars.py fix(env): env var replacement preserve types (#3270) 2025-08-28 17:07:18 +02:00
test_resolver.py chore(rename): move llama_stack.distribution to llama_stack.core (#2975) 2025-07-30 23:30:53 -07:00
test_server.py fix: show descriptive MCP server connection errors instead of generic 500s (#3256) 2025-09-04 13:25:02 -07:00
test_sse.py chore(rename): move llama_stack.distribution to llama_stack.core (#2975) 2025-07-30 23:30:53 -07:00