ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-21 21:14:17 +02:00
Code Issues Projects Releases Packages Wiki Activity
fastmcp/tests/server/auth
History
Exact
Jeremiah Lowin ba47db9b8c
 Fix Azure scope validation (#2269) 
* Update docs for required scopes

* add scopes

* Fix Azure scope validation

Azure returns unprefixed scopes in JWT tokens but requires prefixed scopes in authorization requests. The previous implementation incorrectly validated tokens against prefixed scopes, causing "invalid_token" errors.

Simplified AzureProvider to use standard JWTVerifier with unprefixed scopes for validation. Scopes are only prefixed when building the Azure authorization URL via _build_upstream_authorize_url() override.

Closes #2263
2025-10-26 11:41:22 -04:00
..
providers Fix Azure scope validation (#2269) 2025-10-26 11:41:22 -04:00
__init__.py Add WorkOS and Azure OAuth providers (#1550) 2025-08-20 16:22:03 -04:00
test_auth_provider.py Upgrade to MCP 1.17+ with RFC 9728 compliance (#2122) 2025-10-17 09:29:23 -04:00
test_enhanced_error_responses.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_jwt_issuer.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_jwt_provider.py Replace subprocess tests with in-process async servers (#2006) 2025-10-19 10:47:54 -04:00
test_oauth_consent_flow.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_oauth_mounting.py Support mounting OAuth-protected servers under path prefixes (#2119) 2025-10-17 11:44:49 -04:00
test_oauth_proxy.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_oauth_proxy_redirect_validation.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_oauth_proxy_storage.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_oidc_proxy.py Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 2025-10-24 19:08:58 -04:00
test_redirect_validation.py Fix OAuth redirect URI validation for DCR compatibility (#1661) 2025-08-28 15:19:56 -04:00
test_remote_auth_provider.py Support mounting OAuth-protected servers under path prefixes (#2119) 2025-10-17 11:44:49 -04:00
test_static_token_verifier.py Add documentation for get_access_token() dependency function (#1446) 2025-08-11 13:01:44 -04:00