Spaces:
Sleeping
Sleeping
Commit History
-
Add OAuth proxy that allows authentication with social IDPs without DCR support (#1434)
Jeremiah LowinUnverified signaturef5238eb
-
Remove unnecessary asserts (#1484)
Jeremiah LowinUnverified signatureabc4a6d
-
Update static checks (#1448)
Jeremiah Lowin +1: nate nowackUnverified signatureCo-authored-by: nate nowack <thrast36@gmail.com>4d09a0b -
Add documentation for get_access_token() dependency function (#1446)
Jeremiah Lowin +2: Jeremiah Lowin, marvin-context-protocol[bot]Unverified signatureCo-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com> Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>341332a
-
Enable Protected Resource Metadata to provide resource_name and resou… (#1371)
Yann Jouanin +1: Jeremiah LowinUnverified signatureCo-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>4ee2b0f -
fixes #1398: Add JWT claims to AccessToken (#1399)
Panos Argyrakis +1: Jeremiah LowinUnverified signatureCo-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>60b71f5
-
Introduce `RemoteAuthProvider` for cleaner external identity provider integration, update docs (#1346)
Jeremiah LowinUnverified signature8c0df0f
-
Update AuthKit vocab (#1338)
Jeremiah LowinUnverified signaturefb1f4aa
-
Add comprehensive OAuth 2.1 authentication system with WorkOS integration (#1327)
Jeremiah LowinUnverified signature3959209
-
Add complete support for TokenVerifier protocol (#1297)
Jeremiah LowinUnverified signatureb6176a5
-
feat: Allow Resource Metadata URL as field in OAuthProvider (#1287)
Unverified signature9a6f944
-
Update bearer.py
Jeremiah Lowind215186 -
Support 'scp' claim for OAuth scopes in BearerAuthProvider
Jeremiah Lowin +1: ClaudeSome Identity Providers use 'scp' claim instead of the standard 'scope' claim for OAuth scopes. This change updates the scope extraction logic to support both claims, with 'scope' taking precedence when both are present. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>5c6cd30
-
fix ruff formatting
Shane Stene0e7ece1 -
Update bearer.py
sstene1Unverified signatureRemove TODO590cdcd -
config algorithm support
Shane Stene1740f19
-
Fix typing
Jeremiah Lowin5cb97a7 -
Implement TokenVerifier protocol for mcp-python-sdk compatibility
Jeremiah Lowin +1: ClaudeFixes breaking changes from mcp-python-sdk PR #982 which updated BearerAuthBackend to use TokenVerifier protocol instead of OAuth providers. Changes: - Add verify_token() method to BearerAuthProvider implementing TokenVerifier protocol - Add verify_token() method to InMemoryOAuthProvider implementing TokenVerifier protocol - Update BearerAuthBackend usage in setup_auth_middleware_and_routes() to pass TokenVerifier - Add comprehensive unit tests for TokenVerifier implementations - Add integration tests for BearerAuthBackend with TokenVerifier - Add tests for HTTP auth setup functions All existing functionality preserved with full backwards compatibility. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>ac19f92 -
Fix typeddict imports
Jeremiah Lowin35d4f60
-
Merge pull request #949 from jlowin/fix-doc-render
nate nowackfix a couple parsing issues5587624
-
Apply pre-commit formatting fixes
Jeremiah Lowin956706c -
Fix BearerAuthProvider audience type annotations to support List[str]
Jeremiah Lowin +1: ClaudeThe audience parameter was typed as `str | None` but the implementation already supported `List[str]`. This fix aligns the type annotations with the actual functionality and adds comprehensive validation logic for all audience type combinations. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>ca53851 -
Use specific ValidationError instead of broad Exception catch
Jeremiah Lowin +1: ClaudeAddresses PR feedback to use more specific exception handling for URL validation failures. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>1839cc8 -
Fix JWT issuer validation to support string values per RFC 7519
Jeremiah Lowin +1: ClaudeResolves issue where BearerAuthProvider rejected tokens with non-URL issuer claims. Works around the underlying SDK's URL validation while maintaining RFC 7519 compliance for JWT processing. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>b163829
-
Add audio support
Jeremiah Lowin8dc263e
-
Use ellipsis default
Jeremiah Lowin11b53ee
-
Update auth docs
Jeremiah Lowinf89baa1
-
Add auth docs
Jeremiah Lowin9103a0f
-
flatten auth settings
Jeremiah Lowin058fad1 -
Clean up settings
Jeremiah Lowinccc6631 -
Support configuring bearer auth from env vars
Jeremiah Lowinb310c16 -
update typing
Jeremiah Lowincc579d4 -
Add jwks tests
Jeremiah Lowin904d4e5 -
Add tests; update default issuer
Jeremiah Lowinabb2759 -
Add basic bearer auth for server and client
Jeremiah Lowin95e8d10
-
Create http utility
Jeremiah Lowinf15f08b -
Clean up
Jeremiah Lowin73ff78e
-
Add basic server primitives
Jeremiah Lowin7befcc3