mirror of
https://github.com/PrefectHQ/fastmcp.git
synced 2026-08-24 06:24:18 +02:00
a1a5cca765* Fix Azure scope mismatch causing MCP client validation errors The AzureProvider was prefixing scopes during authorization but not in token validation or Protected Resource Metadata, causing MCP clients to reject tokens with "Server granted unauthorized scopes". Changes: - Prefix required_scopes once during __init__ and use consistently - Pass prefixed scopes to JWTVerifier for token validation - PRM now advertises prefixed scopes to MCP clients - Remove unnecessary idempotent prefixing logic in authorize() - Update comprehensive documentation explaining scope handling - Update tests to reflect corrected behavior Closes #2151 * Clarify that identifier_uri is optional in docstring |
||
|---|---|---|
| .. | ||
| auth | ||
| http | ||
| middleware | ||
| openapi | ||
| proxy | ||
| __init__.py | ||
| test_app_state.py | ||
| test_auth_integration.py | ||
| test_context.py | ||
| test_experimental_openapi_feature_flag.py | ||
| test_file_server.py | ||
| test_icons.py | ||
| test_import_server.py | ||
| test_input_validation.py | ||
| test_log_level.py | ||
| test_logging.py | ||
| test_mount.py | ||
| test_resource_prefix_formats.py | ||
| test_run_server.py | ||
| test_server.py | ||
| test_server_interactions.py | ||
| test_server_lifespan.py | ||
| test_streamable_http_no_redirect.py | ||
| test_tool_annotations.py | ||
| test_tool_exclude_args.py | ||
| test_tool_transformation.py | ||