4 commits

Author	SHA1	Message	Date
Jeremiah Lowin	254ff1a25d	Make CORS opt-in via middleware parameter (#2150)	2025-10-20 15:33:13 -04:00
Jeremiah Lowin	09e899a699	docs: Add AWS Cognito resource server requirement and CORS guidance (#2149)	2025-10-20 15:28:16 -04:00
Jeremiah Lowin	330eaed11f	OAuth proxy issues its own tokens (#2109) ... * OAuth proxy issues its own tokens Implement token factory pattern where proxy issues FastMCP JWTs instead of forwarding upstream tokens. Tokens are minimal references (JTI) that map to encrypted upstream credentials stored server-side. * Update run-tests.yml * Update secret generation and docs * Add upgrade guide	2025-10-17 14:31:53 -04:00
Jeremiah Lowin	d472e30765	Support mounting OAuth-protected servers under path prefixes (#2119) ... * Add issuer_url parameter to OAuth providers for mounting scenarios * Add get_well_known_routes * Update docs * Improve docs and tests * Trigger CI * Fix conditional test execution for Windows	2025-10-17 11:44:49 -04:00