fastmcp/tests/server/auth
Jeremiah Lowin 006a284bf4 Add server-side CIMD support (SEP-991)
Implements OAuth Client ID Metadata Documents support, allowing servers
to accept URL-based client_id values where the URL points to a JSON
metadata document. This eliminates the need for Dynamic Client Registration
(DCR) in many cases.

- Private _cimd.py module (can swap for SDK when available)
- SSRF protection for URL validation
- Size-limited fetch with TTL caching
- CIMD enabled by default (opt-out via cimd_enabled=False)
- Advertises support via client_id_metadata_document_supported metadata
- Client-side client_metadata_url parameter
2025-12-06 11:07:51 -05:00
..
providers Fix type errors for ty 0.0.1-alpha.31 upgrade (#2561) 2025-12-05 21:29:14 -05:00
__init__.py Add WorkOS and Azure OAuth providers (#1550) 2025-08-20 16:22:03 -04:00
test_auth_provider.py Upgrade to MCP 1.17+ with RFC 9728 compliance (#2122) 2025-10-17 09:29:23 -04:00
test_cimd.py Add server-side CIMD support (SEP-991) 2025-12-06 11:07:51 -05:00
test_debug_verifier.py Add DebugTokenVerifier with custom sync/async validation (#2296) 2025-10-31 10:38:01 -04:00
test_enhanced_error_responses.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_jwt_issuer.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_jwt_provider.py Fix type errors for ty 0.0.1-alpha.31 upgrade (#2561) 2025-12-05 21:29:14 -05:00
test_oauth_consent_flow.py Add consent_csp_policy parameter for CSP customization (#2484) 2025-11-26 16:53:40 -05:00
test_oauth_mounting.py Fix RFC 8414 path-aware authorization server metadata discovery (#2533) 2025-12-03 19:16:59 -05:00
test_oauth_proxy.py Move TokenHandler to OAuthProvider for consistent error codes (#2538) 2025-12-04 10:35:00 -05:00
test_oauth_proxy_redirect_validation.py Fix type errors for ty 0.0.1-alpha.31 upgrade (#2561) 2025-12-05 21:29:14 -05:00
test_oauth_proxy_storage.py Update tests for client_secret=None behavior 2025-12-03 15:48:47 -05:00
test_oidc_proxy.py Add extra_authorize_params and extra_token_params to OIDCProxy 2025-11-17 11:57:58 -05:00
test_redirect_validation.py Fix OAuth redirect URI validation for DCR compatibility (#1661) 2025-08-28 15:19:56 -04:00
test_remote_auth_provider.py Support mounting OAuth-protected servers under path prefixes (#2119) 2025-10-17 11:44:49 -04:00
test_static_token_verifier.py Add documentation for get_access_token() dependency function (#1446) 2025-08-11 13:01:44 -04:00