Commit graph

2 commits

Author SHA1 Message Date
FenjuFu
dc5c816a02
fix(serve): protect MCP route with optional bearer auth (#3100)
* fix(serve): protect MCP route with optional bearer auth

Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>

* fix(serve): clarify MCP auth proxy boundaries

Document the Render token incompatibility, expose serve auth in CLI help, and replace source-order assertions with live middleware coverage.

Note: full test suite has pre-existing worktree failures because generated parse-worker.js is absent; targeted auth and proxy suites pass.
Co-authored-by: Cursor <cursoragent@cursor.com>

* chore(docs): preserve existing table formatting

Keep the auth clarifications focused without reformatting unrelated Markdown tables.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(proxy): inject backend MCP credentials

Replace the consumed edge credential with the configured protocol token only for MCP routes so proxied serve authentication remains composable.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
Co-authored-by: Gergo Magyar <gergomagyar0@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-30 17:12:46 +01:00
Shifra Williams
f2717c6a7c
feat(render): add one-click deploy to render support (#2804)
Some checks are pending
Scorecard / Scorecard analysis (push) Waiting to run
CodeQL / Analyze (javascript-typescript) (push) Waiting to run
CodeQL / Analyze (python) (push) Waiting to run
Gitleaks / gitleaks (push) Waiting to run
Publish / Classify release event (push) Waiting to run
Publish / RC guard (marker + release-PR skip) (push) Blocked by required conditions
Publish / ci (push) Blocked by required conditions
Publish / Publish to npm (push) Blocked by required conditions
Publish / Build & Push RC Docker images (push) Blocked by required conditions
Skill copy sync / shipped skills drift guard (push) Waiting to run
Trivy Image Scan / Trivy (gitnexus-cli) (push) Waiting to run
Trivy Image Scan / Trivy (gitnexus-web) (push) Waiting to run
2026-08-06 00:19:44 +00:00