3 people c980b3a361 fix(mcp): tighten auth and request validation edge cases (#43388) ...

Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-24 10:58:59 -07:00

..

annotation_layer

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

chart

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

common

fix(ci): restore master validation checks (#42807)

2026-08-05 22:58:05 -07:00

dashboard

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

database

test(mcp): close systematic test-coverage gaps in mcp_service (#41924)

2026-07-15 12:30:04 -04:00

dataset

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

explore

feat(mcp): add typed Pydantic response schemas to generate_explore_link tool (#39900)

2026-06-24 01:53:08 -07:00

query

feat(mcp): add list and get tools for saved queries and query history (#40346)

2026-05-29 22:16:11 -04:00

report

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

rls

test(mcp): close systematic test-coverage gaps in mcp_service (#41924)

2026-07-15 12:30:04 -04:00

role

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

saved_query

feat: introduce Subject model and entity editors/viewers (#38831)

2026-07-08 11:00:03 -07:00

semantic_layer

fix(mcp): reject unparseable time_range instead of silently matching full table (#42283)

2026-08-04 19:45:30 -04:00

sql_lab

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

system

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

tag

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

task

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

theme

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

user

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

utils

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

conftest.py

…

test_auth_api_key.py

fix(mcp): return a generic message when a request is unauthenticated (#40861)

2026-06-09 09:19:15 -07:00

test_auth_rbac.py

feat(mcp): per-resource token scopes with user-permission intersection (#42297)

2026-08-18 13:11:27 -04:00

test_auth_safeguards.py

fix(mcp): add safeguards to ensure all MCP tools are wrapped with mcp_auth_hook (#40412)

2026-06-18 10:27:53 -07:00

test_auth_user_resolution.py

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

test_composite_token_verifier.py

feat(mcp): per-resource token scopes with user-permission intersection (#42297)

2026-08-18 13:11:27 -04:00

test_g_user_race_condition.py

…

test_guest_scope.py

feat(mcp): scope embedded-guest data reads to the token's dashboards (#41753)

2026-07-09 14:58:01 -03:00

test_guest_token_auth.py

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

test_jwt_verifier_browser_hello.py

feat(mcp): browser hello page with working middleware and config-driven content (#40471)

2026-05-28 11:47:38 -04:00

test_jwt_verifier.py

fix(mcp): fail closed when the JWT verifier has no pinned algorithm (#41296)

2026-06-24 16:15:42 -07:00

test_logging_filters.py

fix(mcp_service): downgrade client-disconnect transport noise to WARNING (SC-115264) (#42441)

2026-07-26 15:02:15 -07:00

test_main_entrypoint.py

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

test_mcp_caching.py

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

test_mcp_config_hs256_guard.py

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

test_mcp_config.py

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

test_mcp_core.py

feat(mcp): deleted_state trash listing for list_charts and list_dashboards (#41855)

2026-07-15 23:36:04 -07:00

test_mcp_e2e_smoke.py

fix(mcp): make streamable-http session mode configurable via MCP_STATELESS_HTTP (#42814)

2026-08-05 21:31:22 -07:00

test_mcp_multi_issuer_identity_binding.py

fix(mcp): require issuer-aware resolver for multi-issuer JWT, fix sanitizer input ordering (#42935)

2026-08-10 15:56:46 -07:00

test_mcp_server.py

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

test_mcp_storage.py

…

test_mcp_tool_registration.py

chore(mcp): remove low-value list/info tools that fail agent-native policy (#40690)

2026-06-06 14:57:41 -04:00

test_middleware_logging.py

fix(mcp): populate user_id in MCP audit logs (#42767)

2026-08-14 16:28:01 -04:00

test_middleware.py

fix(mcp): tighten auth and request validation edge cases (#43388)

2026-08-24 10:58:59 -07:00

test_pooled_screenshot.py

feat(Reports&Alerts): remove Selenium support, require Playwright (#43028)

2026-08-11 16:06:26 -07:00

test_privacy.py

feat(mcp): scope embedded-guest data reads to the token's dashboards (#41753)

2026-07-09 14:58:01 -03:00

test_rbac_tool_enforcement.py

test(mcp): close systematic test-coverage gaps in mcp_service (#41924)

2026-07-15 12:30:04 -04:00

test_result_value_contract.py

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

test_schema_discovery.py

feat: introduce Subject model and entity editors/viewers (#38831)

2026-07-08 11:00:03 -07:00

test_session_scope.py

fix(mcp): give concurrent tool calls isolated db sessions (#42629)

2026-08-13 11:05:40 -07:00

test_tool_search_transform.py

fix(mcp): make search_tools query optional to fix null content on tool discovery (#40906)

2026-06-15 11:32:40 -04:00

test_url_utils.py

fix(mcp): generate durable explore permalink URL instead of ephemeral form_data_key (#40773)

2026-06-19 08:50:11 -07:00