ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-10-13 16:33:20 +02:00
Code Issues Projects Releases Packages Wiki Activity
fastmcp/tests/server/auth
History
Exact
Jeremiah Lowin c55c489bb3
 [3.x] Bound CIMD cache growth (#5430) 
Backports #4852 to 3.x. CIMD clients resolve through the process-local document cache, which now holds at most 1,000 entries and evicts the oldest first. URL-derived clients are not written to the persistent DCR client store, which holds clients that registered. A record stored by an earlier release is used only as a fallback if a fresh resolution fails, and is removed after a successful one. The assertion replay cache also checks its capacity before it adds a new JTI. Behavior matches main.

Co-authored-by: Claude <noreply@anthropic.com>
2026-10-04 09:19:41 -04:00
..
oauth_proxy [3.x] Bound CIMD cache growth (#5430) 2026-10-04 09:19:41 -04:00
providers Fix Azure scope fallback (#4469) (#4662) 2026-07-27 13:10:27 -04:00
__init__.py Add WorkOS and Azure OAuth providers (#1550) 2025-08-20 16:22:03 -04:00
test_auth_provider.py Allow auth providers to override protected resource base URLs (#3900) 2026-04-13 13:36:55 -04:00
test_authorization.py Fix versioned auth middleware checks (#4401) 2026-06-28 10:43:34 -04:00
test_cimd.py [3.x] Bound CIMD cache growth (#5430) 2026-10-04 09:19:41 -04:00
test_cimd_validators.py [3.x] Bound CIMD cache growth (#5430) 2026-10-04 09:19:41 -04:00
test_debug_verifier.py Add DebugTokenVerifier with custom sync/async validation (#2296) 2025-10-31 10:38:01 -04:00
test_enhanced_error_responses.py Fix/cimd flow issue (#4206) 2026-06-27 10:57:58 -04:00
test_jwt_issuer.py Migrate auth JWTs to joserfc (#4221) 2026-05-23 09:29:04 -04:00
test_jwt_provider.py Skip unsupported JWKS keys instead of failing the whole key set (#4515) (#4517) (#4631) 2026-07-26 14:02:20 -04:00
test_jwt_provider_bearer.py Split large test files to comply with loq line limit (#3328) 2026-02-28 11:21:11 -05:00
test_multi_auth.py Allow auth providers to override protected resource base URLs (#3900) 2026-04-13 13:36:55 -04:00
test_oauth_consent_flow.py Reject dot-segments in redirect URI allowlist matching (#3963) 2026-04-17 17:49:25 -04:00
test_oauth_consent_page.py Block unsafe OAuth redirect schemes (#4419) 2026-07-05 17:16:10 -04:00
test_oauth_mounting.py fix(auth): add /.well-known/openid-configuration alias for OAuth server metadata (#4167) 2026-05-20 10:36:01 -04:00
test_oauth_proxy_redirect_validation.py Block unsafe OAuth redirect schemes (#4419) 2026-07-05 17:16:10 -04:00
test_oauth_proxy_storage.py Drop diskcache dependency (CVE-2025-69872) (#3185) 2026-02-16 16:43:15 -05:00
test_oidc_proxy.py fix: bound default OIDC discovery timeout and expose it on provider wrappers (#4374) 2026-06-24 17:16:18 -04:00
test_oidc_proxy_token.py fix: use intent-based flag for OIDC scope patch in load_access_token (#3465) 2026-03-13 17:59:03 -04:00
test_redirect_validation.py Block unsafe OAuth redirect schemes (#4419) 2026-07-05 17:16:10 -04:00
test_remote_auth_provider.py Allow auth providers to override protected resource base URLs (#3900) 2026-04-13 13:36:55 -04:00
test_ssrf_protection.py Backport #4412 to 3.x: support trusted SSRF proxies (#4755) 2026-08-05 10:29:38 -04:00
test_static_token_verifier.py Add documentation for get_access_token() dependency function (#1446) 2025-08-11 13:01:44 -04:00