FenjuFu dc5c816a02 fix(serve): protect MCP route with optional bearer auth (#3100) ... * fix(serve): protect MCP route with optional bearer auth Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com> * fix(serve): clarify MCP auth proxy boundaries Document the Render token incompatibility, expose serve auth in CLI help, and replace source-order assertions with live middleware coverage. Note: full test suite has pre-existing worktree failures because generated parse-worker.js is absent; targeted auth and proxy suites pass. Co-authored-by: Cursor <cursoragent@cursor.com> * chore(docs): preserve existing table formatting Keep the auth clarifications focused without reformatting unrelated Markdown tables. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(proxy): inject backend MCP credentials Replace the consumed edge credential with the configured protocol token only for MCP routes so proxied serve authentication remains composable. Co-authored-by: Cursor <cursoragent@cursor.com> --------- Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com> Co-authored-by: Gergo Magyar <gergomagyar0@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com>		2026-08-30 17:12:46 +01:00
..
fixtures	fix(ingestion): index NestJS decorator routes so api_impact and route_map stop reporting live endpoints as non-existent (#3017)	2026-08-27 08:35:36 +01:00
helpers	fix(ingestion): ignore emitted Next.js build output, and delete the inert public/build entry (#3018)	2026-08-27 13:29:05 +01:00
integration	fix(parse): stabilize parse-cache chunks and cheapen ParsedFile loads (#3093)	2026-08-30 08:31:47 +00:00
unit	fix(serve): protect MCP route with optional bearer auth (#3100)	2026-08-30 17:12:46 +01:00
utils	fix(hook): emit MCP query hint when server owns DB lock (#2396) (#2397)	2026-07-08 18:34:05 +01:00