scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-05 02:41:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 49

fix(mcp): fall back to client_credentials in resolve_mcp_auth when OBO server has no subject_token

Browse source
This commit is contained in:
Ishaan Jaffer 2026-05-01 11:57:16 -07:00
parent d9e09c6b14
commit 90e7faf8f4
No known key found for this signature in database
1 changed files with 11 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
litellm/proxy/_experimental/mcp_server/oauth2_token_cache.py
View file

@ -275,12 +275,18 @@ async def resolve_mcp_auth(
"""
if mcp_auth_header:
return mcp_auth_header
if server.has_token_exchange_config and subject_token:
from litellm.proxy._experimental.mcp_server.auth.token_exchange import (
mcp_token_exchange_handler,
)
if server.has_token_exchange_config:
if subject_token:
from litellm.proxy._experimental.mcp_server.auth.token_exchange import (
mcp_token_exchange_handler,
)
return await mcp_token_exchange_handler.exchange_token(subject_token, server)
return await mcp_token_exchange_handler.exchange_token(subject_token, server)
# No subject_token — fall back to client_credentials using the same client
# credentials and token_url so M2M scenarios still work.
if server.client_id and server.client_secret and server.token_url:
token, _ = await mcp_oauth2_token_cache._fetch_token(server)
return token
if server.has_client_credentials:
return await mcp_oauth2_token_cache.async_get_token(server)
return server.authentication_token