14 commits

Author	SHA1	Message	Date
Jeremiah Lowin	1a788cf349	Merge remote-tracking branch 'origin/main' into feature/client-auto-default ... # Conflicts: # tests/client/test_streamable_http.py # tests/server/middleware/test_initialization_middleware.py # tests/server/tasks/test_task_status_notifications.py	2026-07-20 12:02:38 -04:00
Jeremiah Lowin	18b5ab5852	Migrate to MCP SDK v2.0.0b2 (httpx2) (#4503)	2026-07-18 15:12:47 -04:00
Jeremiah Lowin	3522a98766	Migrate to MCP Python SDK v2 (#4437)	2026-07-06 17:36:45 -04:00
Stephan Eberle	99bf81c64f	Add Keycloak OAuth Provider for Enterprise Authentication and local dev (#1937)	2026-04-13 12:23:10 -04:00
Jeremiah Lowin	c397e68d39	Update ty ignore comments for 0.0.25 compatibility (#3614)	2026-03-24 20:26:26 -04:00
Jeremiah Lowin	c99e0c6351	Refactor OAuthProxy into focused modules (#2935)	2026-01-19 10:10:07 -05:00
Jeremiah Lowin	3826f1a240	Fix typos and formatting	2025-11-15 12:21:15 -05:00
Jeremiah Lowin	48fc8cbc9a	Fix consent form action for subpath mounting (#2382) ... * Fix consent form action for subpath mounting When a FastMCP server is mounted at a subpath (e.g., /api/v1), the consent form used a hardcoded absolute path (/consent/submit) that didn't include the mount prefix, causing 404 errors on submission. Changed the form to use an empty action (action="") which submits to the current URL, making it work correctly regardless of mount path. Also consolidated the consent endpoints to handle both GET and POST at /consent. Fixes #2380 * Update integration test to use /consent instead of /consent/submit	2025-11-05 20:20:38 -05:00
William Easton	063ffe9f64	Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) ... * Checkpoint progress * Checkpoint progress * add derive b64 method * PR clean-up * refactor da proxy * Updates to tests * Make jwt_signing_key required for oauth proxy * use typing_extensions and fix tests * PR Cleanup * also adjust integration tests * Update docs, use client secret to derive jwt signing key * You win some you lose some, gg claude * check for both in derive * update documentation / clean up * Update http.mdx --------- Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-10-24 19:08:58 -04:00
Jeremiah Lowin	3321644ad3	Replace subprocess tests with in-process async servers (#2006) ... * Use anyio as testing backend * Remove asyncio markers * Update streamable http tests * Replace all subprocess tests * Replace anyio task groups with asyncio context managers in tests - Convert run_server_async from anyio task group pattern to asyncio.create_task with async context manager - Remove task_group fixture from conftest - Update all test fixtures to use async with run_server_async pattern - Remove TaskGroup imports from all test files - Tests now work with pytest-asyncio instead of pytest-anyio * Update test_github_provider_integration.py	2025-10-19 10:47:54 -04:00
Jeremiah Lowin	7b7e277d5d	Prevent confused deputy attacks in OAuth proxy (#2056)	2025-10-11 10:53:54 -04:00
Jeremiah Lowin	c3d1176a69	Add WorkOS and Azure OAuth providers (#1550)	2025-08-20 16:22:03 -04:00
nate nowack	77b425c47d	switch from pyright to ty (#1545)	2025-08-19 17:22:52 -04:00
Jeremiah Lowin	ec015de3b0	Add OAuth proxy that allows authentication with social IDPs without DCR support (#1434)	2025-08-18 13:39:58 -04:00