From a437cd1ea35e7be42c645d4f722d5b3fe6e811a6 Mon Sep 17 00:00:00 2001 From: Chris Christiansen Date: Thu, 2 Jul 2026 20:51:55 +0000 Subject: [PATCH] fix: fjern all GCE metadata token-logikk fra _opax_headers --- opax-mcp/server.py | 22 ++++------------------ 1 file changed, 4 insertions(+), 18 deletions(-) diff --git a/opax-mcp/server.py b/opax-mcp/server.py index 5b4fab5..ec9c5b0 100644 --- a/opax-mcp/server.py +++ b/opax-mcp/server.py @@ -62,25 +62,11 @@ def _verify_auth(request: Request): # OPAX helpers (for opax.vauco.no via IAP) # --------------------------------------------------------------------------- -def _opax_identity_token() -> str: - """Hent identity token for opax.vauco.no (Cloud Run IAP/IAM).""" - try: - metadata_url = ( - "http://metadata.google.internal/computeMetadata/v1/instance" - f"/service-accounts/default/identity?audience={OPAX_IAP_CLIENT_ID}&format=full" - ) - resp = httpx.get(metadata_url, headers={"Metadata-Flavor": "Google"}, timeout=5) - resp.raise_for_status() - token = resp.text.strip() - if not token: - raise ValueError("Empty token returned from metadata server") - return token - except Exception as e: - logger.error(f"[IAP TOKEN ERROR] {type(e).__name__}: {e}") - raise - def _opax_headers() -> dict: - return {"Authorization": f"Bearer {_opax_identity_token()}", "Content-Type": "application/json"} + return { + "X-Internal-Key": os.environ.get("INTERNAL_API_KEY", ""), + "Content-Type": "application/json" + }", "Content-Type": "application/json"} async def _opax_get(path: str) -> Any: