mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-07-31 19:16:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix(dashboard): set headers for JWKS requests

Browse source
This commit is contained in:
James Hodgkinson 2026-06-20 22:12:30 +10:00 • committed by Austin Pickett
parent eb08467a7a
commit 83cee29ff7
2 changed files with 24 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
plugins/dashboard_auth/self_hosted/__init__.py
View file

@ -601,6 +601,10 @@ class SelfHostedOIDCProvider(DashboardAuthProvider):
disco["jwks_uri"],
cache_keys=True,
lifespan=_JWKS_CACHE_SECONDS,
headers={
"Accept": "application/json",
"User-Agent": "HermesAgent/1.0",
},
)
return self._jwks_client

20
tests/plugins/dashboard_auth/test_self_hosted_provider.py
View file

@ -571,6 +571,26 @@ class TestVerifySession:
with pytest.raises(ProviderError, match="JWKS"):
provider.verify_session(access_token=token)
def test_jwks_client_sends_explicit_http_headers(self):
provider = oidc_plugin.SelfHostedOIDCProvider(
issuer=_ISSUER, client_id=_CLIENT_ID
)
provider._discovery = dict(_DISCOVERY_DOC)
provider._discovery_fetched_at = time.time()
with patch("jwt.PyJWKClient") as client_cls:
provider._get_jwks_client()
client_cls.assert_called_once_with(
_DISCOVERY_DOC["jwks_uri"],
cache_keys=True,
lifespan=oidc_plugin._JWKS_CACHE_SECONDS,
headers={
"Accept": "application/json",
"User-Agent": "HermesAgent/1.0",
},
)
# ---------------------------------------------------------------------------
# refresh_session + revoke_session