Skip to content

[pull] master from cube-js:master#589

Merged
pull[bot] merged 1 commit into
code:masterfrom
cube-js:master
Jul 11, 2026
Merged

[pull] master from cube-js:master#589
pull[bot] merged 1 commit into
code:masterfrom
cube-js:master

Conversation

@pull

@pull pull Bot commented Jul 11, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

* docs: document Cube token authentication for the Chat API

Chat API requests can now be authenticated with the deployment's own Cube
token (JWT) passed in the X-Cube-Auth-Token header, as an alternative to
API keys. The token must be valid for the agent's deployment and carry the
chat scope; the external user and security context are resolved from the
token claims, and the same token is used as query credentials so row-level
security applies unchanged. The feature is opt-in per deployment.

Adds a Cube token authentication section to the Chat API reference page and
registers the alternative security scheme in the Chat API OpenAPI spec.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BfzMYkSrtEBV9ViFCyrePL

* docs: Cube token auth for Chat API is enabled in deployment settings

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BfzMYkSrtEBV9ViFCyrePL

* docs: require externalId claim in Cube tokens for the Chat API

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BfzMYkSrtEBV9ViFCyrePL

* docs: apply enterprise review corrections to Chat API Cube token auth

Corrects the scope claim to scope (array), documents the sub claim
fallback and optional email claim, notes Authorization header precedence,
adds the exact deployment settings path, qualifies sessionSettings as
API-key-only, and fixes auth error reporting (JSON-RPC error in HTTP 200).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BfzMYkSrtEBV9ViFCyrePL

---------

Co-authored-by: Claude <noreply@anthropic.com>
@pull pull Bot locked and limited conversation to collaborators Jul 11, 2026
@pull pull Bot added the ⤵️ pull label Jul 11, 2026
@pull pull Bot merged commit 22b819a into code:master Jul 11, 2026
3 of 4 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant