get_auth_headers() — anthropic-sdk-python Function Reference

Architecture documentation for the get_auth_headers() function in _auth.py from the anthropic-sdk-python codebase.

Function python AnthropicClient Authentication calls 1 called by 2

Entity Profile

AnthropicClient→ Authentication→ get_auth_headers() — anthropic-sdk-python Function Reference

Dependency Diagram

graph TD
  9e2a0427_3d5d_efdb_8832_2499da1e74c9["get_auth_headers()"]
  a77146a7_73e4_972e_7fba_fee2f52d6092["_auth.py"]
  9e2a0427_3d5d_efdb_8832_2499da1e74c9 -->|defined in| a77146a7_73e4_972e_7fba_fee2f52d6092
  1a84c61a_f43c_16d5_287c_446adc194df6["_prepare_request()"]
  1a84c61a_f43c_16d5_287c_446adc194df6 -->|calls| 9e2a0427_3d5d_efdb_8832_2499da1e74c9
  69e337f6_5da7_c1c3_8d13_9a20707778ba["_prepare_request()"]
  69e337f6_5da7_c1c3_8d13_9a20707778ba -->|calls| 9e2a0427_3d5d_efdb_8832_2499da1e74c9
  7be7b4be_3af1_6102_c892_604e6bfc6620["_get_session()"]
  9e2a0427_3d5d_efdb_8832_2499da1e74c9 -->|calls| 7be7b4be_3af1_6102_c892_604e6bfc6620
  style 9e2a0427_3d5d_efdb_8832_2499da1e74c9 fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

src/anthropic/lib/bedrock/_auth.py lines 33–72

def get_auth_headers(
    *,
    method: str,
    url: str,
    headers: httpx.Headers,
    aws_access_key: str | None,
    aws_secret_key: str | None,
    aws_session_token: str | None,
    region: str | None,
    profile: str | None,
    data: str | None,
) -> dict[str, str]:
    from botocore.auth import SigV4Auth
    from botocore.awsrequest import AWSRequest

    session = _get_session(
        profile=profile,
        region=region,
        aws_access_key=aws_access_key,
        aws_secret_key=aws_secret_key,
        aws_session_token=aws_session_token,
    )

    # The connection header may be stripped by a proxy somewhere, so the receiver
    # of this message may not see this header, so we remove it from the set of headers
    # that are signed.
    headers = headers.copy()
    del headers["connection"]

    request = AWSRequest(method=method.upper(), url=url, headers=headers, data=data)
    credentials = session.get_credentials()
    if not credentials:
        raise RuntimeError("could not resolve credentials from session")

    signer = SigV4Auth(credentials, "bedrock", session.region_name)
    signer.add_auth(request)

    prepped = request.prepare()

    return {key: value for key, value in dict(prepped.headers).items() if value is not None}