mirror of
https://github.com/dograh-hq/dograh.git
synced 2026-06-07 07:55:16 +02:00
00a1a22b74
* refactor: carve out extraction panel * refactor: create spec versions for node types * refactor: create a GenericNode and remove custom nodes * feat: add python and typescript sdk * add dograh sdk * fix: fetch draft workflow definition over published one * fix: fix routes of SDKs to use code gen * chore: remove doclink dependency to reduce image size * chore: format files * chore: bump pipecat * feat: let mcp fetch archived workflows on demand * chore: fix tests * feat: add sdk documentation * chore: change banner and add badge
46 lines
1.9 KiB
Python
46 lines
1.9 KiB
Python
from fastapi import HTTPException
|
|
from fastmcp.server.dependencies import get_http_headers
|
|
from opentelemetry import trace
|
|
|
|
from api.db.models import UserModel
|
|
from api.services.auth.depends import _handle_api_key_auth
|
|
|
|
|
|
async def authenticate_mcp_request() -> UserModel:
|
|
"""Resolve the authenticated Dograh user for an MCP tool invocation.
|
|
|
|
Accepts either `X-API-Key: <key>` or `Authorization: Bearer <key>`,
|
|
reusing the API-key flow from `api.services.auth.depends`.
|
|
|
|
Tags the currently-active OTel span with the resolved organization
|
|
and user identifiers. `_OrgRoutingExporter` reads `dograh.org_id`
|
|
at export time to dispatch the span to the right Langfuse project;
|
|
the `langfuse.user.id` / `langfuse.session.id` attributes make the
|
|
span filterable in the Langfuse UI.
|
|
"""
|
|
headers = get_http_headers()
|
|
api_key = headers.get("x-api-key")
|
|
if not api_key:
|
|
auth = headers.get("authorization", "")
|
|
if auth.lower().startswith("bearer "):
|
|
api_key = auth.split(" ", 1)[1].strip()
|
|
if not api_key:
|
|
raise HTTPException(
|
|
status_code=401,
|
|
detail="Missing API key — send X-API-Key or Authorization: Bearer <key>",
|
|
)
|
|
user = await _handle_api_key_auth(api_key)
|
|
|
|
span = trace.get_current_span()
|
|
if span.is_recording():
|
|
org_id = user.selected_organization_id
|
|
# Intentionally NOT `dograh.org_id` — that attribute triggers the
|
|
# per-org Langfuse routing for pipeline spans, and MCP traffic
|
|
# should land in the default (developer-facing) project only.
|
|
# Exposed under `mcp.org_id` for Langfuse UI filtering without
|
|
# affecting the router.
|
|
span.set_attribute("mcp.org_id", str(org_id))
|
|
span.set_attribute("mcp.user_id", str(user.id))
|
|
span.set_attribute("langfuse.user.id", str(user.id))
|
|
|
|
return user
|