mirror of
https://github.com/apache/superset.git
synced 2026-09-01 13:01:33 +00:00
Addresses review feedback: a custom auth factory skips the guest-token verifier entirely, and leaving GUEST_TOKEN_JWT_SECRET at its default with guest auth enabled fails MCP startup rather than just being insecure. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>