howardcho commented on issue #38806:
URL: https://github.com/apache/superset/issues/38806#issuecomment-4136577519

   Confirmed seeing the same issue on `apache/superset:6.1.0rc1` with 
Keycloak-backed JWT auth.
   
   Our staging MCP server is publicly reachable, JWT auth is configured and 
accepted, and `/mcp` responds correctly. Real clients (Claude Code and MCP 
Inspector) reach the server and `POST /mcp` returns `200 OK`, but the server 
then logs:
   
   `Failed to validate request: No application found. Either work inside a view 
function or push an application context.`
   
   followed by session termination.
   
   We also confirmed:
   
   * `fastmcp` installed
   * MCP runs as a separate process
   * `MCP_AUTH_ENABLED=True`
   * `MCP_JWT_ALGORITHM=RS256`
   * `MCP_JWKS_URI` configured
   * bearer token audience includes `superset-mcp`
   
   This appears provider-agnostic; we are using Keycloak rather than Okta and 
see the same failure pattern.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to