ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-15 10:09:11 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,289 commits 157 branches 116 tags 99 MiB
Commit graph

10 commits

Author SHA1 Message Date
Jeremiah Lowin
b076b2154c
 		Add AzureJWTVerifier for Managed Identity token verification (#3058) 2026-02-02 19:59:13 -05:00
Jeremiah Lowin
d472e30765
 		Support mounting OAuth-protected servers under path prefixes (#2119) 
* Add issuer_url parameter to OAuth providers for mounting scenarios

* Add get_well_known_routes

* Update docs

* Improve docs and tests

* Trigger CI

* Fix conditional test execution for Windows
 2025-10-17 11:44:49 -04:00
Jeremiah Lowin
4a9f02c87c
 		Upgrade to MCP 1.17+ with RFC 9728 compliance (#2122) 
* Upgrade to MCP 1.17+ with RFC 9728 compliance

Updates FastMCP to require MCP 1.17+ and implements RFC 9728-compliant
OAuth protected resource metadata URL handling.

The key change is that .well-known/oauth-protected-resource endpoints
are now registered at path-aware locations. For example, if an MCP
server is mounted at /mcp, the metadata endpoint is now at
/.well-known/oauth-protected-resource/mcp instead of
/.well-known/oauth-protected-resource.

This ensures proper OAuth discovery for path-based resource servers
and aligns with the MCP SDK's implementation of RFC 9728 §3.1.

Changes include:
- Update minimum MCP version from 1.12.4 to 1.17.0
- Use build_resource_metadata_url() for RFC 9728 compliance
- Configure CI to test with latest package versions (--upgrade)
- Update tests for path-aware metadata URLs
- Add icons field to Tool model (introduced in MCP 1.17)

* Fix RemoteAuthProvider integration tests for RFC 9728

* Fix parameterized test for nested base URL paths
 2025-10-17 09:29:23 -04:00
Jeremiah Lowin
fccd081758
 		Clean up code for creating the resource url (#1916) 2025-09-25 10:42:57 -04:00
raphael-linx
eb0db4fb77
 		Fix: get_resource_url nested URL handling (#1914) 2025-09-25 10:35:37 -04:00
Jeremiah Lowin
d36ea42b92
 		Fix OAuth resource URL handling and WWW-Authenticate header (#1706) 2025-09-02 15:14:05 -04:00
Jeremiah Lowin
c6768dad5f
 		Add documentation for get_access_token() dependency function (#1446) 
Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2025-08-11 13:01:44 -04:00
Yann Jouanin
456b22ecf4
 		Enable Protected Resource Metadata to provide resource_name and resou… (#1371) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-08-10 09:01:12 -04:00
Panos Argyrakis
c3f4623690
 		fixes #1398: Add JWT claims to AccessToken (#1399) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-08-09 20:58:09 -04:00
Jeremiah Lowin
77bdc9de20
 		Add remote auth provider tests (#1351) 2025-08-06 13:13:35 -04:00