24 commits

Author	SHA1	Message	Date
Jeremiah Lowin	9987a456a0	Allow authorization consent screen to be disabled (#2172) ... * Add optional authorization consent screen for OAuth providers Adds `require_authorization_consent` parameter (default True) to OAuthProxy and all providers. When disabled, authorization skips the consent screen for local development/testing. Logs security warning when disabled. * Update warning message to use 'authorization consent screen'	2025-10-21 10:00:39 -04:00
Jeremiah Lowin	b362444ddf	Add storage backend documentation (#2137) ... * Add storage backend documentation * Add storage patterns documentation for wrapper caching strategies - Add PassthroughCacheWrapper section for multi-tier caching - Document TTL clamping strategy for optimized memory usage - Add example for wrapping custom storage implementations - Explain how to combine fast in-memory caches with persistent remote stores * Update docs	2025-10-19 19:24:13 -04:00
Jeremiah Lowin	9e78d755c2	Support custom server name, icons, and link in OAuth Proxy consent page (#2135) ... * Implement icon support in fastmcp * Fix icon feature tests - Update snapshot for ResourceTemplate to include icons field - Remove OAuth mounting tests (belong to PR #2119, not this feature) * Update docs * Customize consent screen * Use server website link if available * Anchor link shouldnt have trailing slash * Remove 'a FastMCP server named' from consent page message * Update docs	2025-10-18 11:49:26 -04:00
Jeremiah Lowin	330eaed11f	OAuth proxy issues its own tokens (#2109) ... * OAuth proxy issues its own tokens Implement token factory pattern where proxy issues FastMCP JWTs instead of forwarding upstream tokens. Tokens are minimal references (JTI) that map to encrypted upstream credentials stored server-side. * Update run-tests.yml * Update secret generation and docs * Add upgrade guide	2025-10-17 14:31:53 -04:00
Jeremiah Lowin	d472e30765	Support mounting OAuth-protected servers under path prefixes (#2119) ... * Add issuer_url parameter to OAuth providers for mounting scenarios * Add get_well_known_routes * Update docs * Improve docs and tests * Trigger CI * Fix conditional test execution for Windows	2025-10-17 11:44:49 -04:00
Jeremiah Lowin	52e9af1214	Add RFC 7662 token introspection provider (#2074)	2025-10-16 10:57:06 -04:00
Jeremiah Lowin	7b7e277d5d	Prevent confused deputy attacks in OAuth proxy (#2056)	2025-10-11 10:53:54 -04:00
Stephan Eberle	5486b5a3b9	Add AWS Cognito OAuth Provider for Enterprise Authentication (#1873) ... Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-09-25 11:08:45 -04:00
Jeremiah Lowin	b3ea6ad384	docs: update OAuth and OIDC proxy documentation (#1880)	2025-09-21 11:02:36 -04:00
Jeremiah Lowin	7176d4f293	Add persistent storage for OAuth client registrations (#1879)	2025-09-21 10:56:08 -04:00
Anvi Banga	59e250a98e	feat: Add support for Descope Authentication (#1853) ... Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-09-19 13:46:44 -04:00
Jeremiah Lowin	3dd7373680	feat: Add flexible parameter forwarding to OAuth proxy (#1771)	2025-09-06 15:50:29 -04:00
Jeremiah Lowin	46a5187398	Add token_endpoint_auth_method parameter to OAuthProxy (#1736)	2025-09-03 12:21:40 -04:00
Jeremiah Lowin	1045eb47c2	OAuth proxy PKCE forwarding (#1733)	2025-09-03 12:11:38 -04:00
Jeremiah Lowin	d36ea42b92	Fix OAuth resource URL handling and WWW-Authenticate header (#1706)	2025-09-02 15:14:05 -04:00
Jeremiah Lowin	deff09fe07	refactor: replace auth provider registry with ImportString (#1710)	2025-09-02 08:31:52 -04:00
Jeremiah Lowin	8c678b552b	Add resource_server_url parameter to OAuth proxy providers (#1682)	2025-08-30 08:33:13 -04:00
romanusyk	210e9cc5ca	Add default scope handling in OAuth proxy (#1667)	2025-08-29 09:58:45 -04:00
Jeremiah Lowin	6d9088704e	Fix OAuth redirect URI validation for DCR compatibility (#1661)	2025-08-28 15:19:56 -04:00
Jeremiah Lowin	839a022b07	Add configurable redirect URI validation for OAuth providers (#1582)	2025-08-22 15:52:56 -04:00
Sebastian Kalisz	fe8056fe30	Added import of AuthProxy to auth __init__ (#1568)	2025-08-21 16:28:02 -04:00
Jeremiah Lowin	c3d1176a69	Add WorkOS and Azure OAuth providers (#1550)	2025-08-20 16:22:03 -04:00
Sebastian Kalisz	f7738c6f92	Fixed wrong import path in new docs page (#1538)	2025-08-19 10:26:48 -04:00
Jeremiah Lowin	ec015de3b0	Add OAuth proxy that allows authentication with social IDPs without DCR support (#1434)	2025-08-18 13:39:58 -04:00