update tools integration feedback

[Taofiqq]

Tools Integration Feedback Updates

This PR introduces several improvements to the Permit.io integration for LangChain, focusing on enhanced authorization and authentication capabilities.

Key Changes

JWT Validation Tool Improvements

1. Added support for multiple JWKS input methods

• URL-based JWKS retrieval
• Direct JSON JWKS input

2. Flexible configuration options
3. Improved error handling and validation

Permissions Check Tool Enhancements

1. Renamed input model to LangchainPermissionsCheckToolInput for clarity
2. Added support for ABAC (Attribute-Based Access Control) and ReBAC (Relationship-Based Access Control)
3. Extended input schema to include:

• attributes: Optional dictionary for fine-grained attribute checks
• context: Optional dictionary for additional access control conditions

Configuration Improvements

1. Added support for PDP (Policy Decision Point) URL configuration

• Can be set via environment variable
• Configurable during tool initialization

2. Improved flexibility in tool configuration

New Features

• Comprehensive JWT validation with multiple input methods
• Support for complex permission checking scenarios
• Enhanced flexibility in authorization checks

Test Coverage

• Updated integration tests for JWT validation tool
• Added tests for attribute and context-based permission checks
• Maintained existing test suite compatibility

Recommended Setup

# JWT Validation
jwt_tool = LangchainJWTValidationTool(
    jwks_url="https://your-jwks-endpoint.com",
    # or
    jwks_json={"keys": [...]}
)

# Permissions Check
permissions_tool = LangchainPermissionsCheckTool(
    pdp_url="https://custom-pdp-url.com"
)

# Advanced Permission Check
result = permissions_tool.run(
    user="user123",
    action="read",
    resource="document",
    attributes={
        "department": "engineering",
        "sensitivity": "confidential"
    },
    context={
        "location": "office",
        "time_of_day": "business_hours"
    }
)

[Taofiqq]

@gemanor Is this what you are asking about for the question

Why haven’t you implemented the _get_relevant_documents in the SelfQueryRetriever? Isn’t it needde there?

[gemanor]

Yes, this is what I meant :)