Permit

Permit is an access control platform that provides fine-grained, real-time permission management using various models such as RBAC, ABAC, and ReBAC. It enables organizations to enforce dynamic policies across their applications, ensuring that only authorized users can access specific resources.

Overview

This package provides two LangChain tools for JWT validation and permission checking using Permit:

LangchainJWTValidationTool: Validates JWT tokens against a JWKS endpoint
LangchainPermissionsCheckTool: Checks user permissions using Permit

Setup

Set up the following environment variables:

PERMIT_API_KEY=your_permit_api_key
JWKS_URL=your_jwks_endpoint_url
PERMIT_PDP_URL=your_permit_pdp_url  # Usually http://localhost:7766 for local development or your real deployment

Make sure your PDP (Policy Decision Point) is running at PERMIT_PDP_URL. See Permit docs for details on policy setup and how to launch the PDP container.

Credentials

PERMIT_API_KEY=
JWKS_URL=your_jwks_endpoint_url # or your deployed url
PERMIT_PDP_URL=your_pdp_url # or your deployed url
TEST_JWT_TOKEN= # for quick test purposes

It’s also helpful (but not needed) to set up LangSmith for best-in-class observability:

Instantiation

JWT Validation Tool

The JWT Validation tool verifies JWT tokens against a JWKS (JSON Web Key Set) endpoint.

from langchain_permit.tools import LangchainJWTValidationTool

# Initialize the tool
jwt_validator = LangchainJWTValidationTool(
    jwks_url=#your url endpoint
)

Configuration Options

You can initialize the tool with either:

A JWKS URL
Direct JWKS JSON data
Environment variable (JWKS_URL)

# Using direct JWKS JSON
jwt_validator = LangchainJWTValidationTool(
    jwks_json={
        "keys": [
            {
                "kid": "key-id",
                "kty": "RSA",
                ...
            }
        ]
    }
)

Permissions Check Tool

The Permissions Check tool integrates with Permit.io to verify user permissions against resources.

from permit import Permit
from langchain_permit.tools import LangchainPermissionsCheckTool

# Initialize Permit client
permit_client = Permit(
    token="your_permit_api_key",
    pdp=# Your PDP URL
)

# Initialize the tool
permissions_checker = LangchainPermissionsCheckTool(
    permit=permit_client
)

This documentation demonstrates the key features and usage patterns of both tools.

Invocation

Invoke directly with args

JWT Validation Tool

# Validate a token
async def validate_token():
    claims = await jwt_validator._arun(
        "..."  # Your JWT token
    )
    print("Validated Claims:", claims)

Permissions Check Tool

# Check permissions
async def check_user_permission():
    result = await permissions_checker._arun(
        user={
            "key": "user-123",
            "firstName": "John"
        },
        action="read",
        resource={
            "type": "Document",
            "tenant": "default"
        }
    )
    print("Permission granted:", result)

Input Formats

The permissions checker accepts different input formats:

Simple string for user (converts to user key):

result = await permissions_checker._arun(
    user="user-123",
    action="read",
    resource="Document"
)

Full user object:

result = await permissions_checker._arun(
    user={
        "key": "user-123",
        "firstName": "John",
        "lastName": "Doe",
        "email": "[email protected]",
        "attributes": {"department": "IT"}
    },
    action="read",
    resource={
        "type": "Document",
        "key": "doc-123",
        "tenant": "techcorp",
        "attributes": {"confidentiality": "high"}
    }
)

Invoke with ToolCall

(TODO)

Chaining

TODO: Add user question and run cells

We can use our tool in a chain by first binding it to a tool-calling model and then calling it:

Additional Demo Scripts

For fully runnable demos, check out the /langchain_permit/examples/demo_scripts folder in this repository. You’ll find:

demo_jwt_validation.py – A quick script showing how to validate JWTs using LangchainJWTValidationTool.
demo_permissions_check.py – A script that performs Permit.io permission checks using LangchainPermissionsCheckTool.

Just run python demo_jwt_validation.py or python demo_permissions_check.py (after setting your environment variables) to see these tools in action.

API reference

For detailed documentation of all Permit features and configurations head to the API reference: docs.permit.io/

快速开始

核心组件

进阶使用

在生产环境使用

Overview

Setup

Credentials

Instantiation

JWT Validation Tool

Configuration Options

Permissions Check Tool

Invocation

Invoke directly with args

JWT Validation Tool

Permissions Check Tool

Input Formats

Invoke with ToolCall

Chaining

Additional Demo Scripts

API reference

​Overview

​Setup

​Credentials

​Instantiation

​JWT Validation Tool

​Configuration Options

​Permissions Check Tool

​Invocation

​Invoke directly with args

​JWT Validation Tool

​Permissions Check Tool

​Input Formats

​Invoke with ToolCall

​Chaining

​Additional Demo Scripts

​API reference

Overview

Setup

Credentials

Instantiation

JWT Validation Tool

Configuration Options

Permissions Check Tool

Invocation

Invoke directly with args

JWT Validation Tool

Permissions Check Tool

Input Formats

Invoke with ToolCall

Chaining

Additional Demo Scripts

API reference