From b1e8e4156e8e5d2de682bc79dcae9f62e10293f0 Mon Sep 17 00:00:00 2001 From: Chris Christiansen Date: Sat, 5 Sep 2026 21:53:31 +0000 Subject: [PATCH] fix(mcp): add auth token for hub calls --- opax-mcp/server.py | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/opax-mcp/server.py b/opax-mcp/server.py index e277fef..f3edff3 100644 --- a/opax-mcp/server.py +++ b/opax-mcp/server.py @@ -90,10 +90,15 @@ async def _verify_auth(request: Request) -> None: if not token or token != secret: raise HTTPException(status_code=401, detail="Invalid or missing API key") def _agent_headers() -> dict: - """Headers for maskin-til-maskin kall videre til osvauco-agent via X-Internal-Key.""" + """Headers for maskin-til-maskin kall videre til osvauco-agent.""" + token = google.oauth2.id_token.fetch_id_token( + google.auth.transport.requests.Request(), + os.environ["OSVAUCO_AGENT_URL"], + ) return { - "X-Internal-Key": INTERNAL_API_KEY, # Bruker den nye delte nøkkelen - "Content-Type": "application/json" + "Authorization": f"Bearer {token}", + "X-Internal-Key": INTERNAL_API_KEY, + "Content-Type": "application/json", } async def _agent_get(path: str) -> Any: