Chris CoutinhoandClaude Opus 4.6 5730313574 refactor: remove RFC 8693 token exchange and Keycloak OAuth implementation ...

Nextcloud doesn't support OAuth bearer tokens without upstream patches,
making the RFC 8693 token exchange path untestable and dead code.

Removed:
- nextcloud_mcp_server/auth/token_exchange.py (597 lines)
- nextcloud_mcp_server/auth/keycloak_oauth.py (586 lines)
- OAUTH_TOKEN_EXCHANGE deployment mode from AuthMode enum
- get_session_client_from_context() from context_helper.py
- get_session_token() from token_broker.py
- enable_token_exchange / token_exchange_cache_ttl config fields
- oauth_token_exchange_total Prometheus metric
- Keycloak fixture block from tests/conftest.py (~408 lines)
- Token exchange unit tests from test_config_validators.py,
  test_unified_verifier.py, test_management_status_endpoint.py

Preserved:
- Multi-audience OAuth mode (OAUTH_SINGLE_AUDIENCE)
- Login Flow v2 provisioning with elicitation support
- Token broker background token management
- All existing test coverage for non-exchange paths

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-03 00:22:20 +02:00

..

api

fix: address review feedback — security, caching, CI 429 retry

2026-03-02 17:22:23 +01:00

client

fix: resolve all type checking errors (8 errors fixed)

2025-12-08 01:09:02 +01:00

providers

feat: Add OpenAI provider support for embeddings and generation

2025-11-23 00:33:32 +01:00

search

feat: add configurable fusion algorithms for BM25 hybrid search

2025-11-17 06:48:43 +01:00

__init__.py

feat: Split read/write scopes into app:read/write scopes

2025-10-24 04:38:49 +02:00

test_app_password_storage.py

test: Add comprehensive tests for app password storage and provisioning

2026-01-13 21:44:23 +01:00

test_auth_tools.py

feat: add Docker Compose profiles and Login Flow v2 service

2026-02-27 20:33:54 +01:00

test_basic_auth_middleware.py

fix(config): address reviewer feedback

2025-12-20 21:16:17 +01:00

test_config_validators.py

refactor: remove RFC 8693 token exchange and Keycloak OAuth implementation

2026-04-03 00:22:20 +02:00

test_config.py

fix(mcp): Move all imports to the top of modules

2025-12-26 10:05:27 -06:00

test_document_chunker.py

fix: Add async/await, PDF metadata, and type safety fixes

2025-11-20 02:37:07 +01:00

test_document_processor_config.py

refactor: Transform document parsing into pluggable processor architecture

2025-10-25 19:28:35 +02:00

test_hybrid_auth_setup.py

fix(mcp): Move all imports to the top of modules

2025-12-26 10:05:27 -06:00

test_instrument_tool.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_logging_filter.py

chore: Remove /health and /metrics endpoints from logging

2025-11-10 02:07:45 +01:00

test_login_flow.py

fix: address PR review — XSS escape, asyncio→anyio, URL rewrite dedup

2026-03-30 08:51:41 +02:00

test_management_app_password_endpoints.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_management_pdf_preview_endpoint.py

refactor(api): split management.py into domain-focused modules

2026-01-26 21:28:18 +01:00

test_management_status_endpoint.py

refactor: remove RFC 8693 token exchange and Keycloak OAuth implementation

2026-04-03 00:22:20 +02:00

test_progress_notification.py

feat: Add text processing background worker for telling client about progress

2025-10-25 19:52:45 +02:00

test_provision_routes.py

fix: require bearer token on provision endpoints (open redirect mitigation)

2026-03-31 17:09:37 +02:00

test_response_models.py

fix: convert BDAY datetime.date to string before Pydantic validation

2026-04-01 09:11:45 +02:00

test_scope_authorization_stored.py

fix: address review feedback — security, caching, CI 429 retry

2026-03-02 17:22:23 +01:00

test_scope_decorator.py

feat: Split read/write scopes into app:read/write scopes

2025-10-24 04:38:49 +02:00

test_ssl_config.py

fix: convert CA bundle path to ssl.SSLContext to avoid httpx deprecation warning

2026-02-16 13:27:22 +01:00

test_token_broker.py

feat(auth): implement refresh token rotation for Nextcloud OIDC

2025-12-18 00:01:53 +01:00

test_unified_verifier.py

refactor: remove RFC 8693 token exchange and Keycloak OAuth implementation

2026-04-03 00:22:20 +02:00

test_webhook_presets.py

feat: add webhook management UI and BeforeNodeDeletedEvent support

2025-11-11 20:35:08 +01:00

test_webhook_storage.py

feat(ollama): Pull model on startup if not available in ollama

2025-11-12 00:37:26 +01:00