mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-07-21 16:18:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 8

fix(auth): normalize Anthropic sk-ant-oat pool creds to OAuth

Browse source 
Manually-added Anthropic setup-tokens defaulted to api_key and were sent
via x-api-key, which Anthropic rejects -> 429. Infer OAuth from the
sk-ant-oat prefix in from_dict so all ingest paths agree with
_is_oauth_token(). Fixes #63737.
This commit is contained in:
Manuel Guttmann 2026-07-13 13:24:24 +02:00 • committed by kshitij
parent 7fdae5d22a
commit 77763f00fb
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
agent/credential_pool.py
View file

@ -175,6 +175,16 @@ class PooledCredential:
data.setdefault("id", uuid.uuid4().hex[:6])
data.setdefault("label", payload.get("source", provider))
data.setdefault("auth_type", AUTH_TYPE_API_KEY)
# An Anthropic setup-token (sk-ant-oat*) is always OAuth regardless of
# how it was ingested. The env path infers this, but manually-added
# credentials (hermes auth add / dashboard) default to api_key and are
# then sent with an x-api-key header, which Anthropic rejects for OAuth
# tokens. Normalize here so every ingest path agrees with
# _is_oauth_token()'s prefix detection. See issue #63737.
if provider == "anthropic":
_oat = data.get("access_token") or ""
if isinstance(_oat, str) and _oat.startswith("sk-ant-oat"):
data["auth_type"] = AUTH_TYPE_OAUTH
data.setdefault("priority", 0)
data.setdefault("source", SOURCE_MANUAL)
data.setdefault("access_token", "")