Code

Add support for serverside oauth#255

Code

Merged

ihrpr merged 89 commits intomainmodelcontextprotocol/python-sdk:mainfrom

praboud/authmodelcontextprotocol/python-sdk:praboud/authCopy head branch name to clipboard

May 1, 2025

Commits

Commits on Mar 19, 2025

• wip

  praboud-ant

  committed
  682ff1e

  Copy full SHA for 682ff1e

• Unwind changes

  praboud-ant

  committed
  331d51e

  Copy full SHA for 331d51e

• wip

  praboud-ant

  committed
  d283f56

  Copy full SHA for d283f56

• Get tests passing

  praboud-ant

  committed
  e96d280

  Copy full SHA for e96d280

• Clean up provider interface

  praboud-ant

  committed
  1e9dd4c

  Copy full SHA for 1e9dd4c

• Lint

  praboud-ant

  committed
  d535089

  Copy full SHA for d535089

• Clean up registration endpoint

  praboud-ant

  committed
  031cadf

  Copy full SHA for 031cadf

• Lint

  praboud-ant

  committed
  765efb6

  Copy full SHA for 765efb6

• update token + revoke to use form data

  praboud-ant

  committed
  0637bc3

  Copy full SHA for 0637bc3

• Adjust more things to fit spec

  praboud-ant

  committed
  b99633a

  Copy full SHA for b99633a

• Lint

  praboud-ant

  committed
  9ae1c21

  Copy full SHA for 9ae1c21

• Remove dup

  praboud-ant

  committed
  50683b9

  Copy full SHA for 50683b9

• Comment

  praboud-ant

  committed
  2c5f26a

  Copy full SHA for 2c5f26a

• Refactor back to authorize()

  praboud-ant

  committed
  e605994

  Copy full SHA for e605994

• Improve validation for /token

  praboud-ant

  committed
  e7c5f87

  Copy full SHA for e7c5f87

• Improve validation for registration

  praboud-ant

  committed
  83c0c9f

  Copy full SHA for 83c0c9f

• Improve /authorize validation & add tests

  praboud-ant

  committed
  0c1aae9

  Copy full SHA for 0c1aae9

• Hoist oauth token expiration check into bearer auth middleware

  praboud-ant

  committed
  038fb04

  Copy full SHA for 038fb04

• Add tests for /revoke validation

  praboud-ant

  committed
  a4e17f3

  Copy full SHA for a4e17f3

• Lint + typecheck

  praboud-ant

  committed
  5f11c60

  Copy full SHA for 5f11c60

• Clean up unused error classes

  praboud-ant

  committed
  571913a

  Copy full SHA for 571913a

• Update to use Python 3.10 types

  praboud-ant

  committed
  d43647f

  Copy full SHA for d43647f

• Use classes for handlers

  praboud-ant

  committed
  9d72c1e

  Copy full SHA for 9d72c1e

• Refactor

  praboud-ant

  committed
  a5079af

  Copy full SHA for a5079af

• Simplify bearer auth logic

  praboud-ant

  committed
  c4c2608

  Copy full SHA for c4c2608

• Avoid asyncio dependency in tests

  praboud-ant

  committed
  bc62d73

  Copy full SHA for bc62d73

• Add comment

  praboud-ant

  committed
  3852179

  Copy full SHA for 3852179

• Lint

  praboud-ant

  committed
  874838a

  Copy full SHA for 874838a

• Add json_response.py comment

  praboud-ant

  committed
  f788d79

  Copy full SHA for f788d79

• Format

  praboud-ant

  committed
  152feb9

  Copy full SHA for 152feb9

• Move around the response models to be closer to the handlers

  praboud-ant

  committed
  f37ebc4

  Copy full SHA for f37ebc4

• Get rid of silly TS comments

  praboud-ant

  committed
  c2873fd

  Copy full SHA for c2873fd

• Remove ClientAuthRequest

  praboud-ant

  committed
  fe2c029

  Copy full SHA for fe2c029

• Reorganize AuthInfo

  praboud-ant

  committed
  3a13f5d

  Copy full SHA for 3a13f5d

• Refactor client metadata endpoint

  praboud-ant

  committed
  37c5fc4

  Copy full SHA for 37c5fc4

• Make metadata more spec compliant

  praboud-ant

  committed
  792d302

  Copy full SHA for 792d302

• Use python 3.10 types everywhere

  praboud-ant

  committed
  6c48b11

  Copy full SHA for 6c48b11

• Add back authorization to the /revoke endpoint, simplify revoke

  praboud-ant

  committed
  a437566

  Copy full SHA for a437566

• Move around validation logic

  praboud-ant

  committed
  9fee929

  Copy full SHA for 9fee929

• Fixups while integrating new auth capabilities

  praboud-ant

  committed
  d79be8f

  Copy full SHA for d79be8f

• Pull all auth settings out into a separate config

  praboud-ant

  committed
  8d637b4

  Copy full SHA for 8d637b4

• Move router file to be routes

  praboud-ant

  committed
  8c86bce

  Copy full SHA for 8c86bce

• Add auth context middleware

  praboud-ant

  committed
  31618c1

  Copy full SHA for 31618c1

• Validate scopes + provide default

  praboud-ant

  committed
  5ebbc19

  Copy full SHA for 5ebbc19

• Validate grant_types on registration

  praboud-ant

  committed
  50673c6

  Copy full SHA for 50673c6

• auth: client implementation

  

  dsp-ant

  authored and

  praboud-ant

  committed
  02d76f3

  Copy full SHA for 02d76f3

• update lock

  

  dsp-ant

  authored and

  praboud-ant

  committed
  88edddc

  Copy full SHA for 88edddc

• fix

  

  dsp-ant

  authored and

  praboud-ant

  committed
  d774be7

  Copy full SHA for d774be7

• foo

  

  dsp-ant

  authored and

  praboud-ant

  committed
  a09e958

  Copy full SHA for a09e958

• Format

  praboud-ant

  committed
  4e73552

  Copy full SHA for 4e73552

• Move StreamingASGITransport into the library code, so MCP integrations can use this in their tests

  praboud-ant

  committed
  56f694e

  Copy full SHA for 56f694e

Commits on Mar 21, 2025

• Improved error handling, generic types for provider

  praboud-ant

  committed
  60da682

  Copy full SHA for 60da682

• Rename AuthInfo to AccessToken

  praboud-ant

  committed
  374a0b4

  Copy full SHA for 374a0b4

Commits on Mar 22, 2025

• Rename

  praboud-ant

  committed
  fb5a568

  Copy full SHA for fb5a568

• Add docs

  praboud-ant

  committed
  76ddc65

  Copy full SHA for 76ddc65

• Merge remote-tracking branch 'origin/main' into praboud/auth

  praboud-ant

  committed
  e42dbf5

  Copy full SHA for e42dbf5

• Typecheck

  praboud-ant

  committed
  10e00e7

  Copy full SHA for 10e00e7

Commits on Mar 25, 2025

• Return 401 on missing auth, not 403

  praboud-ant

  committed
  87571d8

  Copy full SHA for 87571d8

• Convert AuthContextMiddleware to plain ASGI middleware & add tests

  praboud-ant

  committed
  c6f991b

  Copy full SHA for c6f991b

• Fix redirect_uri handling

  praboud-ant

  committed
  482149e

  Copy full SHA for 482149e

• Remove client for now

  praboud-ant

  committed
  5230180

  Copy full SHA for 5230180

• Add test for auth context middleware

  praboud-ant

  committed
  8e15abc

  Copy full SHA for 8e15abc

• Add CORS support

  praboud-ant

  committed
  0a1a408

  Copy full SHA for 0a1a408

Commits on Mar 27, 2025

• Comment

  praboud-ant

  committed
  3069aa3

  Copy full SHA for 3069aa3

• Merge remote-tracking branch 'origin/main' into praboud/auth

  Show description for 16f0688
  praboud-ant

  committed
  16f0688

  Copy full SHA for 16f0688

• Remove client tests

  praboud-ant

  committed
  5ecc7f0

  Copy full SHA for 5ecc7f0

• Add ignores

  praboud-ant

  committed
  8c251c9

  Copy full SHA for 8c251c9

Commits on Apr 18, 2025

• Merge remote-tracking branch 'origin/main' into praboud/auth

  Show description for f46dcb1
  praboud-ant

  committed
  f46dcb1

  Copy full SHA for f46dcb1

• Review feedback

  praboud-ant

  committed
  d3725cf

  Copy full SHA for d3725cf

• Fix stream resource leaks and upgrade Starlette

  Show description for 07f4e3a
  

  bhosmer-ant

  authored and

  praboud-ant

  committed
  07f4e3a

  Copy full SHA for 07f4e3a

• Lint

  praboud-ant

  committed
  1237148

  Copy full SHA for 1237148

• Review comments

  praboud-ant

  committed
  1ad1842

  Copy full SHA for 1ad1842

• Rename OAuthServerProvider to OAuthAuthorizationServerProvider

  praboud-ant

  committed
  fa068dd

  Copy full SHA for fa068dd

Commits on Apr 30, 2025

• Merge branch 'main' into praboud/auth

  ihrpr

  committed
  9b5709a

  Copy full SHA for 9b5709a

• revert starlette upgrade

  ihrpr

  committed
  67d568b

  Copy full SHA for 67d568b

• add python-multipart - was missing

  ihrpr

  committed
  16a7efa

  Copy full SHA for 16a7efa

• ruff

  ihrpr

  committed
  91c09a4

  Copy full SHA for 91c09a4

• try fixing test

  ihrpr

  committed
  0582bf5

  Copy full SHA for 0582bf5

• increse timeout

  ihrpr

  committed
  8194bce

  Copy full SHA for 8194bce

Commits on May 1, 2025

• fix test

  ihrpr

  committed
  2c63020

  Copy full SHA for 2c63020

• test

  ihrpr

  committed
  2ea68f2

  Copy full SHA for 2ea68f2

• fix test

  ihrpr

  committed
  b0fe041

  Copy full SHA for b0fe041

• test

  ihrpr

  committed
  ba366e3

  Copy full SHA for ba366e3

• test

  ihrpr

  committed
  e1a9fec

  Copy full SHA for e1a9fec

• skip test

  ihrpr

  committed
  af4221f

  Copy full SHA for af4221f

• Test auth (#609)

  ihrpr

  authored
  f2840fe

  Copy full SHA for f2840fe

• remove pyright upgrade and ruff format

  ihrpr

  committed
  cda4401

  Copy full SHA for cda4401

• uv lock

  ihrpr

  committed
  f2cc6ee

  Copy full SHA for f2cc6ee

• Merge branch 'main' into praboud/auth

  ihrpr

  committed
  23ef519

  Copy full SHA for 23ef519