5 Commits

Author	SHA1	Message	Date
Amin Ghadersohi	135579b8e1	fix(mcp): add type annotations to test fixtures and parameters ... Address code review feedback: add explicit type annotations to all new test function parameters and fixture return types.	2026-05-08 11:42:45 -04:00
Amin Ghadersohi	b9aee62f5f	fix(mcp): wire composite verifier and add ApiKey permission sync ... Wire CompositeTokenVerifier into create_default_mcp_auth_factory, add _api_key_passthrough detection in _resolve_user_from_jwt_context, create ApiKey permissions in create_custom_permissions, and update test_auth_api_key with pass-through and non-matching prefix tests.	2026-05-08 11:42:45 -04:00
Amin Ghadersohi	7c4f87615b	fix(mcp): correct method name in API key auth (extract_api_key_from_request) (#39437)	2026-04-23 23:33:23 -04:00
Amin Ghadersohi	38fdfb4ca2	fix(mcp): prevent stale g.user from causing user impersonation across tool calls (#38747)	2026-03-30 14:23:46 -04:00
Amin Ghadersohi	811dcb3715	feat(api-keys): add API key authentication via FAB SecurityManager (#37973) ... Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Kamil Gabryjelski <kamil.gabryjelski@gmail.com>	2026-03-24 13:37:26 -04:00