fastmcp/tests/server/auth/providers
Jeremiah Lowin ba47db9b8c
Fix Azure scope validation (#2269)
* Update docs for required scopes

* add scopes

* Fix Azure scope validation

Azure returns unprefixed scopes in JWT tokens but requires prefixed scopes in authorization requests. The previous implementation incorrectly validated tokens against prefixed scopes, causing "invalid_token" errors.

Simplified AzureProvider to use standard JWTVerifier with unprefixed scopes for validation. Scopes are only prefixed when building the Azure authorization URL via _build_upstream_authorize_url() override.

Closes #2263
2025-10-26 11:41:22 -04:00
..
__init__.py Add WorkOS and Azure OAuth providers (#1550) 2025-08-20 16:22:03 -04:00
test_auth0.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_aws.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_azure.py Fix Azure scope validation (#2269) 2025-10-26 11:41:22 -04:00
test_descope.py Replace subprocess tests with in-process async servers (#2006) 2025-10-19 10:47:54 -04:00
test_github.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_google.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_introspection.py Add RFC 7662 token introspection provider (#2074) 2025-10-16 10:57:06 -04:00
test_scalekit.py Replace subprocess tests with in-process async servers (#2006) 2025-10-19 10:47:54 -04:00
test_supabase.py Add supabase auth (#1997) 2025-10-08 20:27:55 -04:00
test_workos.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00