GitHub user geovanasullivan created a discussion: MCP server: how to map the JWT identity to a Superset user? (MCP_USER_RESOLVER in docs, not found in code)
Version: Apache Superset 6.1.0. MCP started with superset mcp run, MCP_AUTH_ENABLED=True, JWT validation. What I expected: following the MCP server docs, the sub claim of the token identifies the Superset user, so each person’s RBAC applies. What happens: the JWT is validated, but nothing maps sub to a Superset user. Every tool call fails with “No authenticated user found” unless I set MCP_DEV_USERNAME. With it set, every token acts as the same user, so there is no per-user RBAC or auditing. Docs vs code: the docs mention MCP_USER_RESOLVER. I searched the repository for it and found no results. Questions: - Does MCP_USER_RESOLVER exist? If so, in which release (or branch) is it available? - Is there a supported way in 6.1.0 to map the token identity to a Superset user? - What is the recommended setup for multi-user access until then? (We would like to avoid everyone acting as a single shared user.) @dosu GitHub link: https://github.com/apache/superset/discussions/45457 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
