Tomaten
Tomaten11mo ago

Oauth 2.0 API protection

Hi, we wanted to use langfuse in a project where operations wants to install langfuse server with Oauth 2.0. Is it possible to add extra security via Oauth in the python SDK. Basically we would need to add the access token somehow to the HTTP auth header. It might be a bit related to this topic: https://github.com/langfuse/langfuse-python/pull/114 But we wanto to add Authorization header. Thanks!
1 Reply
Max
Max11mo ago
Hi Tamas, thanks for raising this. Can you share a bit more about your requirements? Right now the SDK needs to authenticate against our server and does this with a token we generate and send via the Auth header. If we want to support Oauth2.0, we need to implement Client Credentials (https://datatracker.ietf.org/doc/html/rfc6749#section-4.4) on the SDKs and the server. Is this what you are aiming for? Why do you need extra security for the API endpoints? I am also happy to jump on a call to discuss details.