mirror of
https://github.com/PrefectHQ/fastmcp.git
synced 2026-10-27 14:21:26 +01:00
0f8d1b9e26Backports `security/injected-tool-authorization` from main. Tools from `ToolInjectionMiddleware` are listed and resolved by the server's tool lookup, so a tool's `auth` check and every middleware in the chain, including `AuthMiddleware`, apply to them as they do to registered tools, wherever the injection middleware sits. Injected tools also follow their task configuration like registered tools. This also covers the deprecated `PromptToolMiddleware` and `ResourceToolMiddleware`, which build on `ToolInjectionMiddleware`. Co-authored-by: Claude <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| openapi | ||
| server | ||
| __init__.py | ||
| conftest.py | ||
| test_add_tool_transformation.py | ||
| test_deprecated.py | ||
| test_elicitation.py | ||
| test_exclude_args.py | ||
| test_function_component_imports.py | ||
| test_import_server.py | ||
| test_openapi_deprecations.py | ||
| test_settings.py | ||
| test_tool_injection_middleware.py | ||
| test_tool_serializer.py | ||