stacklok / toolhive / 24884944127

67%

Build Type

push

github

Committed by web-flow

Commit Message

pkg/llm: implement OIDC token source and thv llm token command (#5033)

* pkg/llm: implement OIDC token source and thv llm token command

Adds a three-tier TokenSource (in-memory → cached refresh token →
browser OIDC+PKCE flow) for the LLM gateway. Access tokens are held
in memory only; refresh tokens are persisted via ScopeLLM secrets.
A 30 s preemptive refresh window avoids gateway rejections on expiry.

thv llm token is now fully implemented: non-interactive, prints a
fresh JWT to stdout with all other output on stderr, suitable for use
as apiKeyHelper or auth.command in Claude Code / Cursor.

Part of #5028

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* changes from review

---------

Co-authored-by: taskbot <taskbot@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Coverage Stats

143 of 253 new or added lines in 2 files covered. (56.52%)

5 existing lines in 3 files now uncovered.

59135 of 89331 relevant lines covered (66.2%)

62.66 hits per line