15 commits

Author	SHA1	Message	Date
Jeremiah Lowin	3522a98766	Migrate to MCP Python SDK v2 (#4437)	2026-07-06 17:36:45 -04:00
Tiago Surjus Kaneta	b0fb2c3ae6	Add valid_scopes and extra_authorize_params to WorkOSProvider (#4135)	2026-05-20 10:31:48 -04:00
Jeremiah Lowin	82f310fe61	AuthKit: auto-bind token audience to resource URL (RFC 8707) (#3905)	2026-04-13 17:11:17 -04:00
Jeremiah Lowin	ea529f6a49	feat: make upstream_client_secret optional in OAuthProxy (#3486) ... * feat: make upstream_client_secret optional in OAuthProxy Extract _create_upstream_oauth_client() factory method for subclass override. Cookie signing falls back to JWT key material when no secret. * fix: include client_id in revocation requests for public clients * fix: use factory method for revocation auth	2026-03-15 11:14:56 -04:00
Jeremiah Lowin	b8c37bfa89	Fix WorkOS token scope verification bypass 🤖 Generated with Codex (#3407)	2026-03-06 17:01:35 -05:00
Bill Easton	cdad99583e	Fix Windows test timeouts in OAuth proxy provider tests (#3123) ... Co-authored-by: Bill Easton <strawgate@users.noreply.github.com> Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2026-02-09 20:54:16 -05:00
Jeremiah Lowin	568300e8b5	Remove automatic environment variable loading from auth providers (#2752)	2025-12-26 15:37:59 -05:00
Jeremiah Lowin	4177d8358d	Fix ty 0.0.5 type errors (#2676)	2025-12-22 19:47:20 -05:00
William Easton	063ffe9f64	Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) ... * Checkpoint progress * Checkpoint progress * add derive b64 method * PR clean-up * refactor da proxy * Updates to tests * Make jwt_signing_key required for oauth proxy * use typing_extensions and fix tests * PR Cleanup * also adjust integration tests * Update docs, use client secret to derive jwt signing key * You win some you lose some, gg claude * check for both in derive * update documentation / clean up * Update http.mdx --------- Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-10-24 19:08:58 -04:00
Jeremiah Lowin	3321644ad3	Replace subprocess tests with in-process async servers (#2006) ... * Use anyio as testing backend * Remove asyncio markers * Update streamable http tests * Replace all subprocess tests * Replace anyio task groups with asyncio context managers in tests - Convert run_server_async from anyio task group pattern to asyncio.create_task with async context manager - Remove task_group fixture from conftest - Update all test fixtures to use async with run_server_async pattern - Remove TaskGroup imports from all test files - Tests now work with pytest-asyncio instead of pytest-anyio * Update test_github_provider_integration.py	2025-10-19 10:47:54 -04:00
nate nowack	04831b75c2	optimize test suite (#1893) ... Co-authored-by: Claude <noreply@anthropic.com>	2025-09-22 20:07:04 -04:00
William Easton	fe4f31c2c7	Enable more type checking rules (#1775)	2025-09-07 11:11:44 -04:00
Jeremiah Lowin	d36ea42b92	Fix OAuth resource URL handling and WWW-Authenticate header (#1706)	2025-09-02 15:14:05 -04:00
Jeremiah Lowin	aef6d23fb9	refactor: move scope parser to utilities (#1642)	2025-08-26 10:50:54 -04:00
Jeremiah Lowin	c3d1176a69	Add WorkOS and Azure OAuth providers (#1550)	2025-08-20 16:22:03 -04:00