Chris CoutinhoandClaude Opus 4.6 47fb562326 fix: replace assert with proper guard and invalidate scope cache after provisioning ...

Replace `assert entry.code_challenge` with a proper if-guard returning a
500 JSON error in the token endpoint, since Python's -O flag strips
asserts and would silently disable PKCE enforcement.

Invalidate the scope cache immediately after Login Flow v2 provisioning
completes, so users no longer hit ProvisioningRequiredError for up to
5 minutes after successfully authenticating.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-03 09:31:36 +01:00

..

static

feat(vector): add Deck card vector search with visualization support

2025-12-13 23:51:18 +01:00

templates

feat(vector): add Deck card vector search with visualization support

2025-12-13 23:51:18 +01:00

__init__.py

feat: Implement ADR-005 unified token verifier to eliminate token passthrough vulnerability

2025-11-05 18:53:14 +01:00

astrolabe_client.py

feat: add self-signed SSL certificate support for Nextcloud connections

2026-02-16 09:21:21 +01:00

bearer_auth.py

feat(server): Experimental support for OAuth2/OIDC authentication

2025-10-14 01:22:15 +02:00

browser_oauth_routes.py

refactor: enforce PLC0415 (import-outside-top-level) for source code

2026-02-20 08:04:50 +01:00

client_registration.py

fix: address review feedback — security, caching, CI 429 retry

2026-03-02 17:22:23 +01:00

client_registry.py

feat(auth): implement OAuth AS proxy to fix audience mismatch (ADR-023)

2026-03-02 11:25:54 +01:00

context_helper.py

feat: Add OAuth token and database metrics (Phases 3-4)

2025-11-13 16:23:00 +01:00

elicitation.py

fix: address review feedback — security, caching, CI 429 retry

2026-03-02 17:22:23 +01:00

keycloak_oauth.py

feat: add self-signed SSL certificate support for Nextcloud connections

2026-02-16 09:21:21 +01:00

login_flow.py

fix: address PR #589 review findings

2026-03-02 09:10:57 +01:00

oauth_routes.py

fix: replace assert with proper guard and invalidate scope cache after provisioning

2026-03-03 09:31:36 +01:00

permissions.py

feat: add webhook management UI and BeforeNodeDeletedEvent support

2025-11-11 20:35:08 +01:00

provisioning_decorator.py

refactor: enforce PLC0415 (import-outside-top-level) for source code

2026-02-20 08:04:50 +01:00

scope_authorization.py

fix: address review feedback — security, caching, CI 429 retry

2026-03-02 17:22:23 +01:00

session_backend.py

fix: restructure routes to prevent SessionAuthBackend from interfering with FastMCP OAuth

2025-11-04 03:34:53 +01:00

storage.py

fix: address review feedback — security, caching, CI 429 retry

2026-03-02 17:22:23 +01:00

token_broker.py

feat: add self-signed SSL certificate support for Nextcloud connections

2026-02-16 09:21:21 +01:00

token_exchange.py

feat: add self-signed SSL certificate support for Nextcloud connections

2026-02-16 09:21:21 +01:00

token_utils.py

fix: address review feedback — security, caching, CI 429 retry

2026-03-02 17:22:23 +01:00

unified_verifier.py

feat: add self-signed SSL certificate support for Nextcloud connections

2026-02-16 09:21:21 +01:00

userinfo_routes.py

refactor: enforce PLC0415 (import-outside-top-level) for source code

2026-02-20 08:04:50 +01:00

viz_routes.py

refactor: enforce PLC0415 (import-outside-top-level) for source code

2026-02-20 08:04:50 +01:00

webhook_routes.py

feat: add self-signed SSL certificate support for Nextcloud connections

2026-02-16 09:21:21 +01:00