refactor: request the neutrally-named token-exchange broker

The broker client was renamed in Keycloak so that the contract an agent has to
honour no longer names the middleware serving it. This is the last consumer to
move; the gateways and LibreChat went first.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Stéphane Tailland
2026-08-29 07:41:36 +02:00
parent 601bd6343e
commit aace433d7e
4 changed files with 8 additions and 5 deletions
+2 -2
View File
@@ -32,9 +32,9 @@ class Settings(BaseSettings):
# design — if the middleware serving these URLs is replaced by something
# that does not re-exchange, the second scope simply becomes unnecessary.
mcp_catalog_url: str = "https://catalog-dev.sttlab.local/catalog-mcp"
mcp_catalog_scope: str = "mcp-catalog-audience kong-token-exchange-broker-audience"
mcp_catalog_scope: str = "mcp-catalog-audience token-exchange-broker-audience"
mcp_sales_url: str = "https://sales-dev.sttlab.local/sales-mcp"
mcp_sales_scope: str = "mcp-sales-audience kong-token-exchange-broker-audience"
mcp_sales_scope: str = "mcp-sales-audience token-exchange-broker-audience"
# --- inference ----------------------------------------------------------
# Always the estate's LLM endpoint, never a provider directly: it carries