FreeOnePlus opened a new pull request, #117: URL: https://github.com/apache/doris-mcp-server/pull/117
## Summary - publish RFC 9728 protected-resource metadata for external OAuth deployments - preserve typed token validation failures across authentication and emit RFC 6750-compliant 401/403 Bearer challenges - return exact operation scope for step-up authorization without exposing tokens or provider-internal details - keep single-worker and multi-worker HTTP routing aligned, while documenting that HTTP challenges do not apply to stdio ## Validation - `uv run pytest -q`: 466 passed, 61 skipped - auth/security suite: 283 passed, 45 skipped - MCP transport matrix: 18 passed (10 Streamable HTTP, 6 real subprocess stdio, 2 multi-worker) - real Doris integration: 4 passed across Streamable HTTP and stdio; temporary tables/users after cleanup: 0/0 - new-file Ruff checks, legacy changed-file no-new-warning baseline, `uv lock --check`, compileall, and package build passed - wheel and sdist contain the new OAuth resource module and exclude local planning artifacts -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
