Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• a766f4be32 test: enhance elicitation callback logging and error handling Chris CoutinhoandClaude 2025-11-07 23:49:58 +01:00
• ee053d559c chore: Remove tests Chris Coutinho 2025-11-07 22:59:57 +01:00
• 71326384da feat: add real elicitation integration test with python-sdk MCP client Chris CoutinhoandClaude 2025-11-07 22:05:56 +01:00
• 11cdab475f feat: unify session architecture and enhance login status visibility Chris CoutinhoandClaude 2025-11-07 21:50:55 +01:00
• 281d28c7cd test: Add comprehensive elicitation URL and refresh token validation Chris CoutinhoandClaude 2025-11-07 21:21:58 +01:00
• 0c9a9ea24d fix: Consolidate OAuth callbacks and implement PKCE for all flows Chris CoutinhoandClaude 2025-11-07 21:08:55 +01:00
• dfa6d08ba7 Merge pull request #266 from cbcoutinho/renovate/quay.io-keycloak-keycloak-26.x Chris CoutinhoandGitHub 2025-11-07 12:24:57 +01:00
• c5395041d3 chore(deps): update quay.io/keycloak/keycloak docker tag to v26.4.4 renovate-bot-cbcoutinho[bot]andGitHub 2025-11-07 11:06:04 +00:00
• c1e135c4a2 fix(deps): update dependency mcp to >=1.21,<1.22 renovate-bot-cbcoutinho[bot]andGitHub 2025-11-07 05:06:10 +00:00
• 50cda2209f Merge pull request #264 from cbcoutinho/renovate/docker.io-library-nextcloud-32.0.1 Chris CoutinhoandGitHub 2025-11-07 01:01:06 +01:00
• d34e17a68b chore(deps): update docker.io/library/nextcloud:32.0.1 docker digest to 5b043f7 renovate-bot-cbcoutinho[bot]andGitHub 2025-11-06 23:17:53 +00:00
• 77e491beea bump: version 0.24.1 → 0.25.0 github-actions[bot] 2025-11-05 23:02:25 +00:00
• 7812ac0ee7 Merge pull request #263 from cbcoutinho/adr/005-unified-token-verifier Chris CoutinhoandGitHub 2025-11-06 00:02:02 +01:00
• 659087e4c7 fix: Implement proper OAuth resource parameters and PRM-based discovery Chris CoutinhoandClaude 2025-11-05 23:19:03 +01:00
• bdb1ba2051 refactor: Eliminate duplicate validation logic in UnifiedTokenVerifier Chris CoutinhoandClaude 2025-11-05 21:58:52 +01:00
• 7d9ab5559c fix: Simplify token verifier to be RFC 7519 compliant Chris CoutinhoandClaude 2025-11-05 21:44:04 +01:00
• 877c4c91e0 fix: Use Keycloak client ID for NEXTCLOUD_RESOURCE_URI in token exchange Chris CoutinhoandClaude 2025-11-05 19:18:10 +01:00
• 5deb3132c3 fix: Correct OAuth token audience validation for multi-audience mode Chris CoutinhoandClaude 2025-11-05 19:03:35 +01:00
• 9fab6cb550 feat: Implement ADR-005 unified token verifier to eliminate token passthrough vulnerability Chris CoutinhoandClaude 2025-11-05 18:53:14 +01:00
• 28c2debf3e docs: Add ADR-005 for unified token verifier architecture Chris CoutinhoandClaude 2025-11-05 18:34:43 +01:00
• 461971a1a8 Merge pull request #262 from cbcoutinho/feature/user-settings Chris CoutinhoandGitHub 2025-11-05 15:59:54 +01:00
• 3485b55e2d ci: Update oidc app Chris Coutinho 2025-11-05 15:58:40 +01:00
• 4adb9de5f0 chore: fix typo Chris Coutinho 2025-11-05 15:36:50 +01:00
• bfa944d0e8 ci: Rename pre-commit hook [skip ci] Chris Coutinho 2025-11-05 15:31:52 +01:00
• 01569497d7 ci: Add pre-commit hook for ty [skip ci] Chris Coutinho 2025-11-05 15:26:00 +01:00
• 6cccd92b3b build: Add type checking Chris Coutinho 2025-11-05 15:19:55 +01:00
• 9dcda0cd6a test: Update config Chris Coutinho 2025-11-05 09:53:23 +01:00
• 7c2f39930a ci: Update oidc app config Chris Coutinho 2025-11-05 07:13:46 +01:00
• 205c3b013c build: Update oidc submodule Chris Coutinho 2025-11-05 06:57:12 +01:00
• ed9a8677fe Merge pull request #260 from cbcoutinho/renovate/docker-metadata-action-digest Chris CoutinhoandGitHub 2025-11-05 05:53:52 +01:00
• e8c499938f Merge pull request #259 from cbcoutinho/renovate/docker.io-library-nextcloud-32.0.1 Chris CoutinhoandGitHub 2025-11-05 05:43:17 +01:00
• 4d8b6fca49 chore(deps): update docker.io/library/nextcloud:32.0.1 docker digest to 40b1b5d renovate-bot-cbcoutinho[bot]andGitHub 2025-11-04 23:09:17 +00:00
• 67eb4455fd chore(deps): update docker/metadata-action digest to 318604b renovate-bot-cbcoutinho[bot]andGitHub 2025-11-04 17:08:19 +00:00
• 7052c19de0 bump: version 0.24.0 → 0.24.1 github-actions[bot] 2025-11-04 12:28:13 +00:00
• 921854ce87 Merge pull request #253 from cbcoutinho/renovate/mcp-1.x Chris CoutinhoandGitHub 2025-11-04 13:27:46 +01:00
• 3e988acb97 fix(deps): update dependency mcp to >=1.20,<1.21 renovate-bot-cbcoutinho[bot]andGitHub 2025-11-04 11:08:34 +00:00
• f587a4e31f bump: version 0.23.0 → 0.24.0 github-actions[bot] 2025-11-04 10:27:39 +00:00
• 6e95447272 Merge pull request #256 from cbcoutinho/feature/keycloak Chris CoutinhoandGitHub 2025-11-04 11:27:09 +01:00
• 8983f25eaf fix: add missing await for get_nextcloud_client in capabilities resource Chris CoutinhoandClaude 2025-11-04 10:22:50 +01:00
• 1675fc521b fix: use valid Fernet encryption keys in token exchange tests Chris CoutinhoandClaude 2025-11-04 10:06:06 +01:00
• dec02f17d1 test: remove Bearer token tests for browser-only /user* endpoints Chris CoutinhoandClaude 2025-11-04 09:47:19 +01:00
• 881b0ba03c feat: add scope protection to OAuth provisioning tools Chris CoutinhoandClaude 2025-11-04 09:25:20 +01:00
• 942fe35719 fix: accept resource URL in token audience for Nextcloud JWT tokens Chris CoutinhoandClaude 2025-11-04 08:46:34 +01:00
• 723eb57060 feat: enable authorization services for token exchange in Keycloak Chris CoutinhoandClaude 2025-11-04 08:34:51 +01:00
• 619d0e4be6 fix: remove token-exchange-nextcloud scope and accept tokens without audience Chris CoutinhoandClaude 2025-11-04 06:19:30 +01:00
• dc7abcbd48 fix: move audience mapper from scope to nextcloud-mcp-server client Chris CoutinhoandClaude 2025-11-04 06:09:16 +01:00
• 3d4dfcbb35 fix: move token-exchange-nextcloud from default to optional scopes Chris CoutinhoandClaude 2025-11-04 05:35:07 +01:00
• de99296779 feat: implement scope-based audience mapping and RFC 9728 support Chris CoutinhoandClaude 2025-11-04 05:28:58 +01:00
• 10dffd0c10 fix: restructure routes to prevent SessionAuthBackend from interfering with FastMCP OAuth Chris CoutinhoandClaude 2025-11-04 03:34:53 +01:00
• 737d62fe91 fix: allow OAuth Bearer tokens on /mcp endpoint by excluding from session auth Chris CoutinhoandClaude 2025-11-04 03:26:13 +01:00
• 192c4bf009 fix: correct OAuth token audience validation using RFC 8707 resource parameter Chris CoutinhoandClaude 2025-11-04 03:06:11 +01:00
• 01d1cf9190 feat: integrate token exchange into MCP server application Chris CoutinhoandClaude 2025-11-04 02:32:40 +01:00
• 0ff85dbe4f feat: implement RFC 8693 Standard Token Exchange for Keycloak Chris CoutinhoandClaude 2025-11-04 02:30:37 +01:00
• 96789db29d Merge pull request #258 from cbcoutinho/renovate/docker.io-library-redis-alpine Chris CoutinhoandGitHub 2025-11-04 01:15:51 +01:00
• b20c9c6203 fix: remove remaining references to deleted oauth_callback and oauth_token Chris CoutinhoandClaude 2025-11-04 00:29:49 +01:00
• 15113dbb03 fix: remove Hybrid Flow, make Progressive Consent default (ADR-004) Chris CoutinhoandClaude 2025-11-04 00:26:07 +01:00
• 615f345928 chore(deps): update docker.io/library/redis:alpine docker digest to 28c9c4d renovate-bot-cbcoutinho[bot]andGitHub 2025-11-03 23:11:28 +00:00
• d14f2f666d feat: Add userinfo route/page Chris Coutinho 2025-11-04 00:03:24 +01:00
• d92945a388 test: fix async context manager mocking in userinfo tests Chris CoutinhoandClaude 2025-11-03 22:49:26 +01:00
• 42426b4597 fix: browser OAuth userinfo endpoint and refresh token rotation Chris CoutinhoandClaude 2025-11-03 22:46:19 +01:00
• c2dcb06fe1 feat: add browser-based user info page with separate OAuth flow Chris CoutinhoandClaude 2025-11-03 22:16:49 +01:00
• 95b73019ab fix: make ENABLE_PROGRESSIVE_CONSENT consistently opt-in (default false) Chris CoutinhoandClaude 2025-11-03 20:31:39 +01:00
• 6a0f537d66 fix: make provisioning checks opt-in (default false) Chris CoutinhoandClaude 2025-11-03 19:50:57 +01:00
• 71e77e95bc refactor: integrate token exchange into unified get_client() pattern Chris CoutinhoandClaude 2025-11-03 19:45:47 +01:00
• 636bfd416f build: Update oidc submodule Chris Coutinho 2025-11-03 18:19:20 +01:00
• 64864db736 fix: Disable Progressive Consent for mcp-oauth to enable Hybrid Flow tests 3 people 2025-11-03 17:17:21 +01:00
• 027fc0b2d6 docs: Add critical token exchange pattern documentation 3 people 2025-11-03 16:36:47 +01:00
• d768909fd4 feat: Implement ADR-004 Progressive Consent foundation (partial) 3 people 2025-11-03 16:33:33 +01:00
• 3b4606b798 build: Update submodule Chris CoutinhoandChris Coutinho 2025-11-03 10:30:13 +01:00
• 63b457380a ci: exclude manual tests from CI test runs Chris CoutinhoandChris Coutinho 2025-11-03 10:27:22 +01:00
• b41bbd6c65 ci: Add condition service_healthy check for app to mcp containers Chris CoutinhoandChris Coutinho 2025-11-03 10:15:57 +01:00
• 9adfc72612 Merge pull request #257 from cbcoutinho/renovate/pin-dependencies Chris CoutinhoandGitHub 2025-11-03 08:22:12 +01:00
• c896a2de63 feat: Complete ADR-004 Progressive Consent OAuth flows implementation Chris CoutinhoandClaude 2025-11-03 08:14:23 +01:00
• d16bcdcfbb feat: Implement ADR-004 Progressive Consent foundation components Chris CoutinhoandClaude 2025-11-03 07:51:07 +01:00
• 6c3997b24c chore(deps): pin quay.io/keycloak/keycloak docker tag to 3617b09 renovate-bot-cbcoutinho[bot]andGitHub 2025-11-03 05:12:12 +00:00
• 9d514f52b0 docs: Refactor ADR-004 to Progressive Consent architecture with dual OAuth flows Chris CoutinhoandClaude 2025-11-03 02:55:27 +01:00
• 4e1d143e54 Merge remote-tracking branch 'origin/master' into feature/keycloak Chris Coutinho 2025-11-03 02:49:00 +01:00
• 02a2c4a16f bump: version 0.22.7 → 0.23.0 github-actions[bot] 2025-11-03 01:48:39 +00:00
• f37008fdc3 Merge pull request #254 from cbcoutinho/feature/keycloak Chris CoutinhoandGitHub 2025-11-03 02:47:57 +01:00
• 0d45120470 docs: Update ADR-004 with progressive consent architecture Chris CoutinhoandClaude 2025-11-03 02:34:30 +01:00
• babd60e08b feat: Implement ADR-004 Hybrid Flow with comprehensive integration tests Chris CoutinhoandClaude 2025-11-03 02:18:30 +01:00
• f48e039e9e docs: WIP with Hybrid token Chris Coutinho 2025-11-03 01:19:46 +01:00
• 14a8f70503 docs: Correct ADR-004 to Token Broker Architecture with strict audience isolation Chris CoutinhoandClaude 2025-11-03 00:44:34 +01:00
• bf8120682e docs: Rewrite ADR-004 for Federated Authentication Architecture Chris CoutinhoandClaude 2025-11-02 23:58:15 +01:00
• f2af5a39a8 docs: Add ADR-004 - MCP Server as OAuth Client for Offline Access Chris CoutinhoandClaude 2025-11-02 23:31:39 +01:00
• 7cb616c7ce feat: Auto-configure impersonation role in Keycloak realm import Chris CoutinhoandClaude 2025-11-02 22:03:14 +01:00
• 34df5f5b9a feat: Implement dual-tier token exchange (Standard V2 + Legacy V1 impersonation) Chris CoutinhoandClaude 2025-11-02 21:54:17 +01:00
• e26c5128b7 docs: Reject service account tokens as OAuth authentication pattern Chris CoutinhoandClaude 2025-11-02 21:09:27 +01:00
• ed813af45c Revert "test: Add automated test for service account token acquisition (ADR-002 Tier 1)" Chris Coutinho 2025-11-02 21:00:56 +01:00
• 1e071c83a9 test: Add automated test for service account token acquisition (ADR-002 Tier 1) Chris Coutinho 2025-11-02 20:39:52 +01:00
• 76430bec21 docs: Update ADR-002 with OAuth-only focus and testing status [skip ci] Chris CoutinhoandClaude 2025-11-02 20:33:11 +01:00
• e81c2ad33d docs: Update upstream OAuth status with completed oidc app PRs [skip ci] Chris CoutinhoandClaude 2025-11-02 19:46:16 +01:00
• 23360485a8 refactor: Remove NEXTCLOUD_OIDC_CLIENT_STORAGE environment variable Chris CoutinhoandClaude 2025-11-02 19:08:49 +01:00
• 2ca6725fc6 docs: Replace .nextcloud_oauth_client.json references with SQLite storage Chris CoutinhoandClaude 2025-11-02 19:06:59 +01:00
• 4c7d1cfc8d test: Add scope-based authorization tests for Keycloak external IdP Chris CoutinhoandClaude 2025-11-02 18:47:52 +01:00
• b68c704c4d refactor: Remove unnecessary user_oidc patch - CORSMiddleware patch is sufficient Chris CoutinhoandClaude 2025-11-02 18:47:37 +01:00
• 849c67c32a fix: Complete Keycloak external IdP integration with all tests passing Chris CoutinhoandClaude 2025-11-02 18:18:30 +01:00
• b3725dd2f5 test: Remove --headed from pytest addopts Chris Coutinho 2025-11-02 14:44:57 +01:00
• 6117aaaed3 fix: Complete Keycloak external IdP integration with all tests passing Chris CoutinhoandClaude 2025-11-02 14:12:43 +01:00
• 403f8be429 feat: Add Keycloak external IdP integration with custom scopes Chris CoutinhoandClaude 2025-11-02 12:44:50 +01:00