18 Commits

Author SHA1 Message Date
Taylor Wilsdon
9dc9b1c825 pkce fix 2026-02-28 10:06:50 -04:00
Taylor Wilsdon
885a413a5a ruff 2026-02-05 11:31:44 -05:00
Taylor Wilsdon
13b6092cda jwt handling improvements 2026-02-05 11:17:59 -05:00
Chetan Sarva
59873342e9 fix: memory leak in external OAuth 2.1 session storage
In external OAuth 2.1 mode, skip session storage entirely.
The access token arrives fresh with every request from the external
provider, there's no refresh_token, and the mcp_session_id is
ephemeral (new UUID per request in stateless mode). Storing these
transient tokens creates unbounded dict growth (memory leak) with
entries that are never cleaned up or reused.

Credit to @ljagiello in PR #383
Co-authored-by: lukasz@jagiello.org
2026-01-30 10:17:22 -05:00
Taylor Wilsdon
6b8352a354 apply ruff formatting 2025-12-13 13:49:28 -08:00
Taylor Wilsdon
b0f04eff69 more feedback 2025-10-18 13:44:31 -04:00
Taylor Wilsdon
f70da12dfd review comments 2025-10-18 13:19:24 -04:00
Taylor Wilsdon
33b41a59d8 timezone awareness handling improvements and tasks fix 2025-10-18 13:01:43 -04:00
Taylor Wilsdon
923df7eca5 refactor oauth2.1 support to fastmcp native 2025-10-05 18:00:10 -04:00
Taylor Wilsdon
bbab827652 timezone aware handling 2025-09-28 16:13:55 -04:00
Taylor Wilsdon
238a314fef session binding and legacy compatibility 2025-09-28 16:08:41 -04:00
Taylor Wilsdon
8f9a46e55b implement WORKSPACE_MCP_STATELESS_MODE 2025-08-23 11:12:21 -04:00
Taylor Wilsdon
2f08cec133 logging cleanup 2025-08-05 15:58:22 -04:00
Taylor Wilsdon
0967594097 completely working 2025-08-05 10:22:01 -04:00
Taylor Wilsdon
71e2f1ba3e Enhanced Session Management better guardrails 2025-08-03 15:51:04 -04:00
Taylor Wilsdon
ba48a4803d refac bridge and context modules, absorb essential functioanlity into oaauth21sessionstore 2025-08-03 11:27:50 -04:00
Taylor Wilsdon
c45bb3956c oauth2.1 truly works 2025-08-02 18:25:08 -04:00
Taylor Wilsdon
5aae243b22 minimal fastmcp based oauth working 2025-08-02 14:32:42 -04:00