mirror of
https://github.com/PrefectHQ/fastmcp.git
synced 2026-08-17 19:19:12 +02:00
9c21754a45* Fix Azure provider to handle OIDC scopes correctly OIDC scopes (openid, profile, email, offline_access) were being incorrectly prefixed with identifier_uri, causing Azure to reject authorization requests. This fix: - Detects OIDC scopes and sends them unprefixed to Azure - Filters OIDC scopes from token validation (Azure doesn't include them in access token scp claims) - Still advertises OIDC scopes to clients via valid_scopes - Also handles dot-notation scopes (e.g., User.Read) correctly Fixes #2451, #2420 * Fix dot-notation scopes to be prefixed (custom scopes can have dots) * Improve Azure scope handling docs with clear examples |
||
|---|---|---|
| .. | ||
| providers | ||
| __init__.py | ||
| test_auth_provider.py | ||
| test_debug_verifier.py | ||
| test_enhanced_error_responses.py | ||
| test_jwt_issuer.py | ||
| test_jwt_provider.py | ||
| test_oauth_consent_flow.py | ||
| test_oauth_mounting.py | ||
| test_oauth_proxy.py | ||
| test_oauth_proxy_redirect_validation.py | ||
| test_oauth_proxy_storage.py | ||
| test_oidc_proxy.py | ||
| test_redirect_validation.py | ||
| test_remote_auth_provider.py | ||
| test_static_token_verifier.py | ||