FenjuFu
|
dc5c816a02
|
fix(serve): protect MCP route with optional bearer auth (#3100)
* fix(serve): protect MCP route with optional bearer auth
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
* fix(serve): clarify MCP auth proxy boundaries
Document the Render token incompatibility, expose serve auth in CLI help, and replace source-order assertions with live middleware coverage.
Note: full test suite has pre-existing worktree failures because generated parse-worker.js is absent; targeted auth and proxy suites pass.
Co-authored-by: Cursor <cursoragent@cursor.com>
* chore(docs): preserve existing table formatting
Keep the auth clarifications focused without reformatting unrelated Markdown tables.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(proxy): inject backend MCP credentials
Replace the consumed edge credential with the configured protocol token only for MCP routes so proxied serve authentication remains composable.
Co-authored-by: Cursor <cursoragent@cursor.com>
---------
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
Co-authored-by: Gergo Magyar <gergomagyar0@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-08-30 17:12:46 +01:00 |
|