Skip to content

Add workload_identity_federation to api secrets schema#615

Merged
Manu Goyal (manugoyal) merged 1 commit into
mainfrom
manu/add-workload-identity-to-schema
May 21, 2026
Merged

Add workload_identity_federation to api secrets schema#615
Manu Goyal (manugoyal) merged 1 commit into
mainfrom
manu/add-workload-identity-to-schema

Conversation

@manugoyal
Copy link
Copy Markdown
Contributor

No description provided.

@vercel
Copy link
Copy Markdown

vercel Bot commented May 21, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
ai-proxy Ready Ready Preview, Comment May 21, 2026 8:35pm

Request Review

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5dd7010080

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "Codex (@codex) review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "Codex (@codex) address that feedback".

Comment on lines +19 to +20
.enum(["api_key", "oauth_bearer", "workload_identity_federation"])
.default("api_key"),
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Handle WIF auth_type as bearer auth

By adding "workload_identity_federation" to AnthropicMetadataSchema, secrets with that value now validate, but the runtime auth path in packages/proxy/src/proxy.ts still treats only auth_type === "oauth_bearer" as bearer and otherwise sends x-api-key (see isAnthropicOAuthBearerSecret/anthropicAuthHeaders). For Anthropic WIF tokens this will send the wrong header format and cause request authentication failures whenever users set the new enum value.

Useful? React with 👍 / 👎.

@manugoyal Manu Goyal (manugoyal) merged commit 23b50ee into main May 21, 2026
6 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants