Jeremiah Lowin f038cf3be7 Add machine-to-machine client authentication (#4583) ... * Add M2M client credentials auth providers Wrap the SDK's client_credentials and private_key_jwt OAuth providers as FastMCP-idiomatic ClientCredentialsOAuthProvider and PrivateKeyJWTOAuthProvider, enabling browser-free client authentication via Client(auth=...). * Fix M2M token cache collision and explicit-scope drop Namespace the token cache by client_id so distinct clients sharing one store don't overwrite each other's tokens; pin caller-supplied scopes so the token request keeps them; fix CodeQL URL-substring check in tests; drop unused logger. * Preserve step-up scope union, scope-aware token cache, restore token expiry Only pin the caller's explicit scopes on initial authorization, leaving the SDK's step-up scope union intact; namespace the token cache by requested scopes as well as client_id; restore persisted absolute expiry on init so an expired stored token is re-fetched. * Skip expiry restore for non-expiring reloaded tokens * Distinguish expires_in=0 from omitted when restoring expiry * Scope step-up flag to the flow via ContextVar; runnable JWT signing example		2026-07-21 12:27:08 -04:00
..
change-register.mdx	Add machine-to-machine client authentication (#4583)	2026-07-21 12:27:08 -04:00
feature-program.mdx	Address review: drop tasks from modern capability table; note the reentrancy blocker too	2026-07-20 20:28:23 -04:00
index.mdx	Refresh v4 notes index overview to match shipped work	2026-07-20 20:02:49 -04:00
known-gaps.mdx	Refresh v4 developer notes to match shipped work	2026-07-20 20:00:37 -04:00
protocol-2026.mdx	Address review: drop tasks from modern capability table; note the reentrancy blocker too	2026-07-20 20:28:23 -04:00