ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-20 12:34:17 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,579 commits 156 branches 116 tags 71 MiB
Commit graph

756 commits

Author SHA1 Message Date
Jeremiah Lowin
538611b50b
 		Backport CIMD assertion audience fix to v3 (#4799) 
* Backport CIMD assertion audience fix

* test(auth): exercise CIMD audience mismatch

🤖 Generated with OpenAI Codex

* Revert "test(auth): exercise CIMD audience mismatch"

This reverts commit 9225572505.

* test(auth): exercise CIMD audience mismatch

🤖 Generated with OpenAI Codex

---------

Co-authored-by: zzstoatzz <thrast36@gmail.com>
 2026-08-10 15:42:16 -05:00
Jeremiah Lowin
fcdf422e54
 		Backport #4412 to 3.x: support trusted SSRF proxies (#4755) 2026-08-05 10:29:38 -04:00
Jeremiah Lowin
aa8ab1ee66
 		Fix Azure scope fallback (#4469) (#4662) 
(cherry picked from commit 1d932cc778)

Co-authored-by: nate nowack <thrast36@gmail.com>
 2026-07-27 13:10:27 -04:00
Kaki Wang
93696a59f4
 		Skip unsupported JWKS keys instead of failing the whole key set (#4515) (#4517) (#4631) 
(cherry picked from commit 1fca15abe6)

Co-authored-by: Burt Matthews <80060660+earfman@users.noreply.github.com>
 2026-07-26 14:02:20 -04:00
shaun smith
d929882f77
 		Hugging Face Auth Integration (#4385) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-07-08 20:27:44 -04:00
Jeremiah Lowin
5fe4fae535
 		Restore HTTP host guard compatibility (#4472) 2026-07-08 20:16:44 -04:00
Jeremiah Lowin
400db61b8b
 		Relax host origin guard defaults (#4439) 2026-07-06 20:59:28 -04:00
Jeremiah Lowin
691766b5d0
 		[codex] Fix OpenAPI resource template requests (#4407) 2026-07-05 19:11:03 -04:00
Jeremiah Lowin
c1b0396c0a
 		Block IPv6 transition SSRF bypasses (#4426) 2026-07-05 17:52:57 -04:00
Jeremiah Lowin
67527c1f69
 		Block unsafe OAuth redirect schemes (#4419) 2026-07-05 17:16:10 -04:00
Jeremiah Lowin
57a279928d
 		Protect streamable HTTP from DNS rebinding (#4405) 2026-07-05 17:11:08 -04:00
Jeremiah Lowin
cccb529f50
 		Fix DCR redirect URI validation (#4408) 2026-07-05 17:05:13 -04:00
Jeremiah Lowin
de521e651d
 		Fix versioned auth middleware checks (#4401) 2026-06-28 10:43:34 -04:00
Jeremiah Lowin
feaae683a4
 		[codex] Fix event store replay isolation (#4402) 2026-06-27 12:49:24 -04:00
Jeremiah Lowin
5de15e0c21
 		Block NAT64 SSRF bypass (#4400) 2026-06-27 12:21:37 -04:00
Jeremiah Lowin
a8bb1b08c2
 		Raise fastmcp.ValidationError for invalid tool arguments (#4392) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
 2026-06-27 11:14:20 -04:00
Jacky Su
0668eb7b80
 		Fix/cimd flow issue (#4206) 2026-06-27 10:57:58 -04:00
Jeremiah Lowin
0cffe41115
 		fix: validate task tool arguments against declared types (#4373) 2026-06-27 10:03:59 -04:00
Jeremiah Lowin
a612846224
 		fix: bound default OIDC discovery timeout and expose it on provider wrappers (#4374) 2026-06-24 17:16:18 -04:00
Jeremiah Lowin
ade2b3ff46
 		fix: bracket IPv6 hosts in server startup log URL (#4372) 2026-06-24 17:15:40 -04:00
Bobby Davidson
7f2d034f4d
 		Forward IdP auth errors to MCP client instead of showing HTML error page (#4293) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-06-24 12:09:09 -04:00
Tomasz Czochański
4ce8e2a5d0
 		Fix: async rate limiting middleware get_client_id callbacks (#4319) 
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-06-24 10:27:30 -04:00
Jeremiah Lowin
3b8538e242
 		Allow private JWT headers (#4290) 2026-06-06 02:23:48 +01:00
Jeremiah Lowin
e58f386bac
 		Log refresh-token misses in OAuthProxy instead of failing silently (#4276) 2026-06-03 11:22:35 -04:00
René Mulder
0f4f78c464
 		Fix resource templates with query params on proxied servers (#4251) 
Co-authored-by: René Mulder <rene@silverflow.com>
 2026-05-31 14:03:49 -04:00
Jeremiah Lowin
58e0f5320b
 		Decouple FastMCP access token lifetime from upstream expires_in (#4254) 2026-05-30 11:48:23 -04:00
Jeremiah Lowin
53b20168c8
 		Close upstream OAuth clients (#4248) 2026-05-27 19:45:45 -04:00
Jeremiah Lowin
140d96aadd
 		Forward proxy initialize as bridge behavior (#4228) 2026-05-27 10:41:49 -04:00
Bill Easton
802ceaaa6b
 		Add targeted coverage tests (#4230) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-25 18:57:28 -04:00
Jeremiah Lowin
2bff3725bf
 		Surface proxy upstream failures (#4227) 2026-05-23 14:56:10 -04:00
Jeremiah Lowin
59223f6e89
 		Allow pre-bound HTTP sockets (#4222) 2026-05-23 10:08:49 -04:00
Jeremiah Lowin
b8c9d58d61
 		Migrate auth JWTs to joserfc (#4221) 2026-05-23 09:29:04 -04:00
Jeremiah Lowin
e242abee7d
 		Let ToolResult return an error result via is_error (#4217) 2026-05-22 20:20:52 -04:00
rgillinlz
81a16ed27f
 		fix(auth): unprefix Azure scopes echoed back to MCP clients (#4130) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-20 12:22:24 -04:00
mohanram
0022d8518f
 		Add token_expiry_threshold_seconds for proactive token refresh (#4142) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-20 10:47:26 -04:00
Shigechika AIKAWA
2a262438fa
 		fix(auth): add /.well-known/openid-configuration alias for OAuth server metadata (#4167) 
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-20 10:36:01 -04:00
Bill Easton
1c4069efa3
 		fix(proxy): restore _current_server in _restore_request_context (#4168) 2026-05-20 10:34:00 -04:00
Tiago Surjus Kaneta
b0fb2c3ae6
 		Add valid_scopes and extra_authorize_params to WorkOSProvider (#4135) 2026-05-20 10:31:48 -04:00
Bill Easton
2d61d8a46b
 		fix: add OTEL spans to sampling step and tool execution (#4059) 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-20 09:38:58 -04:00
Bill Easton
344a4f81b5
 		fix(auth): disambiguate auth-denied vs missing component messages (#4165) 2026-05-20 09:36:27 -04:00
Bill Easton
11951585c0
 		fix(tests): hoist azure-identity import out of the OBO test timeout window (#4176) 2026-05-20 09:35:56 -04:00
Bill Easton
24b594b1e3
 		fix: VersionSpec eq matching normalizes versions and selects deterministically (#4058) 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-20 09:35:25 -04:00
Sarthak Bhardwaj
8209093871
 		fix(http): terminate active streamable-HTTP transports before lifespan shutdown (#4118) 2026-05-10 10:58:13 -04:00
Kiran Thakkar
cf59a4511f
 		Fix OCI Provider issue in 3.x version. Add OCI auth provider example … (#4116) 
* Fix OCI Provider issue in 3.x version. Add OCI auth provider example and test

* Fix OCI Provider issue in 3.x version. Add OCI auth provider example and test. Fixed a couple of minor issues in README.

* Rerun CI
 2026-05-10 10:08:00 -04:00
Craig Ringer
89b99ecfb9
 		fix(proxy): fall back to live identifier for backend_* span attributes (#4109) 
🤖 Generated with Claude Code (Opus 4.7) on behalf of @ringerc

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-10 10:07:57 -04:00
sergeykad
28722f846a
 		fix: drop exc_info for expected tool failures, remove unreachable ValidationError (#4029) 2026-05-09 14:56:17 -04:00
Shaik Mohammed Kaif
6b6db33c4a
 		#4084 [Issues] Windows startup crash due to UnicodeDecodeError when l… (#4092) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-07 15:30:56 -04:00
Jeremiah Lowin
4719f3055a
 		Make Docket reentrant; mounted servers enter their own lifespan (#4095) 2026-05-04 17:36:50 -04:00
Taylor Wilsdon
61e56c683e
 		enh: Add public API for updating OAuthProxy scopes after initialization (#4091) 2026-05-04 15:49:12 -04:00
cuyua9
0b59af9489
 		Fix sampling from background tasks (#4068) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-04 12:52:35 -04:00