mirror of
https://github.com/PrefectHQ/fastmcp.git
synced 2026-08-09 07:09:11 +02:00
7d76c9d055* Add examples/ to ty static-analysis gate * Fix example type errors and stale SDK idioms for ty * Use typing_extensions.TypedDict for the quiz tool-param type Question is a take_quiz parameter, so FastMCP builds a Pydantic schema for it; typing.TypedDict raises PydanticUserError on Python 3.10/3.11 (only 3.12+ accepts it). ty and 3.12 runs miss this, so it slipped in. * Guard get_access_token() None case in huggingface_oauth example Caught by the ty gate this PR adds: the example, merged separately, had never been type-checked against examples/. Matches the existing aws_oauth/keycloak_oauth pattern. * Print actual YAML text in custom serializer example
46 lines
1.2 KiB
Python
46 lines
1.2 KiB
Python
"""Keycloak OAuth server example for FastMCP.
|
|
|
|
This example demonstrates how to protect a FastMCP server with Keycloak OAuth.
|
|
|
|
Required: Keycloak 26.6.0 or later with Dynamic Client Registration enabled.
|
|
|
|
To run:
|
|
KEYCLOAK_REALM_URL=https://your-keycloak.com/realms/myrealm python server.py
|
|
"""
|
|
|
|
import os
|
|
|
|
from fastmcp import FastMCP
|
|
from fastmcp.server.auth.providers.keycloak import KeycloakAuthProvider
|
|
from fastmcp.server.dependencies import get_access_token
|
|
|
|
auth = KeycloakAuthProvider(
|
|
realm_url=os.getenv("KEYCLOAK_REALM_URL") or "http://localhost:8080/realms/fastmcp",
|
|
base_url="http://127.0.0.1:8000",
|
|
# audience="http://127.0.0.1:8000", # Recommended for production
|
|
)
|
|
|
|
mcp = FastMCP("Keycloak Example Server", auth=auth)
|
|
|
|
|
|
@mcp.tool
|
|
def echo(message: str) -> str:
|
|
"""Echo the provided message."""
|
|
return message
|
|
|
|
|
|
@mcp.tool
|
|
async def get_access_token_claims() -> dict:
|
|
"""Get the authenticated user's access token claims."""
|
|
token = get_access_token()
|
|
if token is None:
|
|
return {"error": "Not authenticated"}
|
|
return {
|
|
"sub": token.claims.get("sub"),
|
|
"scope": token.claims.get("scope"),
|
|
"azp": token.claims.get("azp"),
|
|
}
|
|
|
|
|
|
if __name__ == "__main__":
|
|
mcp.run(transport="http", port=8000)
|