SandboxTokenVerifier

SandboxTokenVerifier(
  self,
  *,
  api_url: Optional[str] = None,
  jwks_url: Optional

Constructors

Methods

View source on GitHub

Parameters

Name	Type	Description
`api_url`	`Optional[str]`	Default:`None` LangSmith API URL whose origin serves the JWKS. Defaults to LANGSMITH_ENDPOINT.
`jwks_url`	`Optional[str]`	Default:`None` Full JWKS URL; overrides `api_url`.
`timeout`	`float`	Default:`10.0`
`allow_insecure_jwks`	`bool`	Default:`False`

constructor

__init__

Name	Type
api_url	Optional[str]
jwks_url	Optional[str]
timeout	float
allow_insecure_jwks	bool

Verifies tokens LangSmith signs for code running in or behind a sandbox.

Keys are fetched from LangSmith's JWKS endpoint and cached.

Example:

verifier = SandboxTokenVerifier()

user = verifier.verify_user_token( request.headers[USER_TOKEN_HEADER], audience=request.headers["Host"] )

In a proxy callback endpoint:

callback = verifier.verify_callback( body=await request.body(), signature=request.headers[CALLBACK_SIGNATURE_HEADER], aud="https://example.com/sandbox-callback", )

HTTP timeout in seconds for fetching the JWKS.

Allow fetching the JWKS over plain HTTP from a non-loopback host. Anyone who can tamper with that traffic can forge tokens this verifier accepts.

LangChain Assistant

Menu

SandboxTokenVerifier

Constructors

Methods

Parameters

In a proxy callback endpoint:

Menu

SandboxTokenVerifier

Constructors

Methods

Parameters

In an app served from a LangSmith-login service URL:

In a proxy callback endpoint: