6 commits

Author	SHA1	Message	Date
Jeremiah Lowin	cc02df94c5	Audit v4 docs: fix missing version badges, fill whats-new gaps (#4668) ... * Fix missing/wrong 4.0.0 version badges * Fill v4 badge and whats-new gaps found in docs audit	2026-07-27 15:03:18 -04:00
Jeremiah Lowin	920cb47778	Add require_roles auth check (#4656) ... * Add require_roles auth check * Make role docs runnable standalone and fully annotated * Treat a scalar role claim as one role; correct step-up docs * Add v4 version badge to require_roles docs	2026-07-27 12:36:58 -04:00
Jeremiah Lowin	4ebb3fd5e6	Emit scope step-up challenges for incremental authorization (SEP-2350) (#4623) ... * Signal component-level scope shortfalls as insufficient_scope (SEP-2350) * Fix ty type narrowing in scope step-up test * Respect check short-circuit when reporting scope shortfall (P2) * Report union of unmet scopes and document step-up contract * Aggregate scope shortfall across the AuthMiddleware chain * Stop chain scope aggregation at the first unevaluated gate	2026-07-26 14:13:26 -04:00
Jeremiah Lowin	50b23299f8	Support async auth checks (#3152) ... Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>	2026-02-11 12:48:51 -05:00
Jeremiah Lowin	931d6f878c	Remove require_auth; fix auth docs re: component-level enforcement (#3103) ... 🤖 Generated with Claude Code https://claude.ai/code/session_01WWzwcBfLWnxoN9XNs5Fhxr Co-authored-by: Claude <noreply@anthropic.com>	2026-02-06 20:08:50 -05:00
Jeremiah Lowin	766641a1a5	Add authorization checks to components and servers (#2855)	2026-01-12 19:56:52 -05:00