5 commits

Author	SHA1	Message	Date
Jeremiah Lowin	7b7e277d5d	Prevent confused deputy attacks in OAuth proxy (#2056)	2025-10-11 10:53:54 -04:00
Anders Julton	82cf3888dd	Azure (Entra) OAuth: Validate token against FastMCP app, not Graph. (#1891) ... Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-10-08 09:06:35 -04:00
Jeremiah Lowin	d36ea42b92	Fix OAuth resource URL handling and WWW-Authenticate header (#1706)	2025-09-02 15:14:05 -04:00
Jeremiah Lowin	aef6d23fb9	refactor: move scope parser to utilities (#1642)	2025-08-26 10:50:54 -04:00
Jeremiah Lowin	c3d1176a69	Add WorkOS and Azure OAuth providers (#1550)	2025-08-20 16:22:03 -04:00