{"record":{"id":"b2f3ee24922d54ed","repo":"chroma-core/chroma","slug":"invalid-token-transport-header-token-header-mu","errorCode":null,"errorMessage":"Invalid token transport header: {token_header}. Must be one of {allowed_token_headers}","messagePattern":"Invalid token transport header: (.+?)\\. Must be one of (.+?)","errorType":"validation","errorClass":"ValueError","httpStatus":null,"severity":"error","filePath":"chromadb/auth/token_authn/__init__.py","lineNumber":72,"sourceCode":"\n\ndef _check_token(token: str) -> None:\n    token_str = str(token)\n    if not all(c in valid_token_chars for c in token_str):\n        raise ValueError(\n            \"Invalid token. Must contain only ASCII letters, digits, and punctuation.\"\n        )\n\n\nallowed_token_headers = [\n    TokenTransportHeader.AUTHORIZATION.value,\n    TokenTransportHeader.X_CHROMA_TOKEN.value,\n]\n\n\ndef _check_allowed_token_headers(token_header: str) -> None:\n    if token_header not in allowed_token_headers:\n        raise ValueError(\n            f\"Invalid token transport header: {token_header}. \"\n            f\"Must be one of {allowed_token_headers}\"\n        )\n\n\nclass TokenAuthClientProvider(ClientAuthProvider):\n    \"\"\"\n    Client auth provider for token-based auth. Header key will be either\n    \"Authorization\" or \"X-Chroma-Token\" depending on\n    `chroma_auth_token_transport_header`. If the header is \"Authorization\",\n    the token is passed as a bearer token.\n    \"\"\"\n\n    def __init__(self, system: System) -> None:\n        super().__init__(system)\n        self._settings = system.settings\n\n        system.settings.require(\"chroma_client_auth_credentials\")","sourceCodeStart":54,"sourceCodeEnd":90,"githubUrl":"https://github.com/chroma-core/chroma/blob/aecdd12c8a891610db8653630b066b32ceb678b5/chromadb/auth/token_authn/__init__.py#L54-L90","documentation":"Error \"Invalid token transport header: {token_header}. Must be one of {allowed_token_headers}\" thrown in chroma-core/chroma.","triggerScenarios":"Thrown at chromadb/auth/token_authn/__init__.py:72 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"aecdd12c8a891610db8653630b066b32ceb678b5","analyzedAt":"2026-08-16T21:53:27.228Z","schemaVersion":2},"datasetVersion":"2026-08-16T23:17:17.608Z"}