ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-28 02:10:38 +02:00
Code Issues Projects Releases Packages Wiki Activity

Require exact consent cookie domain

Browse source
This commit is contained in:
Jeremiah Lowin 2026-08-04 17:32:02 -04:00
commit ce58ceec7b
No known key found for this signature in database
14 changed files with 121 additions and 93 deletions
Download patch file Download diff file Expand all files Collapse all files

5
tests/server/auth/test_oidc_proxy.py
View file

@ -489,7 +489,7 @@ class TestOIDCProxyInitialization:
call_args = mock_get.call_args
assert call_args[1]["timeout_seconds"] == 12
def test_domain_compatible_consent_cookies(self, valid_oidc_configuration_dict):
def test_explicit_consent_cookie_domain(self, valid_oidc_configuration_dict):
with patch(
"fastmcp.server.auth.oidc_proxy.OIDCConfiguration.get_oidc_configuration"
) as mock_get:
@ -504,13 +504,14 @@ class TestOIDCProxyInitialization:
client_secret=TEST_CLIENT_SECRET,
base_url=TEST_BASE_URL,
jwt_signing_key="test-secret",
consent_cookie_policy="domain-compatible",
consent_cookie_domain="example.com",
)
validate_proxy(mock_get, proxy, oidc_config)
assert (
proxy._cookie_name("MCP_CONSENT_STATE") == "__Secure-MCP_CONSENT_STATE"
)
assert proxy._consent_cookie_domain == "example.com"
def test_token_verifier_initialization(self, valid_oidc_configuration_dict):
"""Test token verifier initialization."""