yuqi1129 opened a new issue, #11566:
URL: https://github.com/apache/gravitino/issues/11566

   ### Describe the subtask
   
   Propagate the authenticated principal's Bearer token from the MCP server 
configuration through to every outbound HTTP call to Gravitino, replacing the 
current anonymous `httpx.AsyncClient`.
   
   **Changes:**
   - `mcp_server/client/plain/plain_rest_client_operation.py`: accept `token` 
parameter; set `Authorization: Bearer <token>` header on the shared 
`httpx.AsyncClient` when token is non-empty
   - `mcp_server/client/factory.py`: pass `token` through `create_rest_client`
   - `mcp_server/core/context.py`: read `setting.token` and pass to factory; 
reject startup (raise) if token is required but absent
   
   **Acceptance:**
   - A request with a valid token reaches Gravitino with `Authorization: Bearer 
<token>` header
   - A missing token when auth is required raises an error at startup rather 
than silently running as anonymous
   
   ### Parent issue
   
   TBD (EPIC to be linked after creation)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to