[dwolfson]

Problem

On a bare 401, BaseServerClient._async_make_request minted a new token as self.user_id / self.user_pwd and retried, whatever token was in the headers. A token set with set_bearer_token() for a different user therefore quietly became a token for the client's own user, and the request succeeded as that user with no error. user_pwd falls back to settings.User_Profile.user_pwd, so a client built without a password was exposed too.

Seen in the portal: a user logged in as Peter had Lineage Explorer queries run as erinoverview. Repro on 6.2.14: MyProfile(view, url, "erinoverview", "secret"), then set_bearer_token(<expired token>), then get_my_profile() returns Erin's profile. exec_report_spec(token=..., user=..., user_pass=...) had the same exposure. (The portal already has a workaround on egeria-workspaces branch fix/token-expiry-identity-switch.)

Fix

• BaseServerClient records the user it minted its current token for (_token_minted_for). The constructor and set_bearer_token() set it to None, because the owner of a caller-supplied token is unknown.
• The 401 retry runs only when there is no token, or the token was minted for self.user_id. An expired caller-supplied token now raises PyegeriaUnauthorizedException.
• EgeriaTech and Egeria pass the minting user to their sub-clients, including ones created later. So do the internal helper clients in DataDiscovery, ClassificationExplorer, AutomatedCuration and the format_set_executor fallback. Their own tokens still renew.
• Recorded as ISSUE-167 under Fixed in PYEGERIA_ISSUES.md.

Behaviour change: a token passed to a client's constructor no longer auto-renews on 401. Code that passes an expired token that way now gets an error instead of a token for the configured user.

Tests

• New tests/micro-tests/test_external_token_no_auth_retry.py has 7 tests. Four of them fail on the old code: external token, token minted for another user, set_bearer_token after minting, and an external token on EgeriaTech. The other three cover self-renewal and the no-token case, and pass both before and after.
• The full micro-test suite passes (1643 tests, 0 failures).
• omvs_audit.py reports the same counts as on main.
• Not tested against a live server.

🤖 Generated with Claude Code

https://claude.ai/code/session_015pdMuQanRknaXmcpx4LmLb