OAuth proxy issues its own tokens (#2109)

* OAuth proxy issues its own tokens

Implement token factory pattern where proxy issues FastMCP JWTs
instead of forwarding upstream tokens. Tokens are minimal references
(JTI) that map to encrypted upstream credentials stored server-side.

* Update run-tests.yml

* Update secret generation and docs

* Add upgrade guide
This commit is contained in:
Jeremiah Lowin 2025-10-17 14:31:53 -04:00 committed by GitHub
commit 330eaed11f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
9 changed files with 1424 additions and 100 deletions

View file

@ -31,7 +31,7 @@ jobs:
os: [ubuntu-latest, windows-latest]
python-version: ["3.10"]
fail-fast: false
timeout-minutes: 5
timeout-minutes: 10
steps:
- uses: actions/checkout@v5