chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix: fjern GCE metadata token-kall, bruk kun X-Internal-Key for m2m

Browse Source
This commit is contained in:
Chris Christiansen 2026-07-02 20:40:47 +00:00
parent 1f4df47083
commit 10eb49b244
1 changed files with 5 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
opax-mcp/server.py
View File

@ -100,23 +100,12 @@ async def _opax_post(path: str, body: dict) -> Any:
# OSVauco Agent helpers (for direct service-to-service calls)
# ---------------------------------------------------------------------------
def _osvauco_agent_identity_token() -> str:
"""Hent identity token for direkte kall til osvauco-agent."""
try:
audience = os.environ.get("OSVAUCO_AGENT_URL")
if not audience:
raise ValueError("OSVAUCO_AGENT_URL environment variable is not set.")
auth_req = google.auth.transport.requests.Request()
token = google.oauth2.id_token.fetch_id_token(auth_req, audience)
if not token:
raise ValueError("Empty token returned from fetch_id_token")
return token
except Exception as e:
logger.error(f"[SERVICE-TO-SERVICE TOKEN ERROR] {type(e).__name__}: {e}")
raise
def _osvauco_agent_headers() -> dict:
return {"Authorization": f"Bearer {_osvauco_agent_identity_token()}", "X-Internal-Key": os.environ.get("INTERNAL_API_KEY", ""), "Content-Type": "application/json"}
"""Headers for maskin-til-maskin kall til osvauco-agent via X-Internal-Key."""
return {
"X-Internal-Key": os.environ.get("INTERNAL_API_KEY", ""),
"Content-Type": "application/json"
}
async def _osvauco_agent_post(path: str, body: dict) -> Any:
"""Kaller osvauco-agent direkte med service-to-service auth."""