diff --git a/tests/test_litellm/proxy/management_endpoints/test_mcp_management_endpoints.py b/tests/test_litellm/proxy/management_endpoints/test_mcp_management_endpoints.py index 84dee5b05c5..ebfc9ef4482 100644 --- a/tests/test_litellm/proxy/management_endpoints/test_mcp_management_endpoints.py +++ b/tests/test_litellm/proxy/management_endpoints/test_mcp_management_endpoints.py @@ -1574,6 +1574,7 @@ class TestTemporaryMCPSessionEndpoints: existing_server.aws_region_name = None existing_server.aws_service_name = None existing_server.upstream_resource = None + existing_server.oauth_token_header = None mock_manager = MagicMock() mock_manager.get_mcp_server_by_id.return_value = existing_server @@ -1609,6 +1610,7 @@ class TestTemporaryMCPSessionEndpoints: existing_server.aws_region_name = None existing_server.aws_service_name = None existing_server.upstream_resource = None + existing_server.oauth_token_header = None for key, value in server_overrides.items(): setattr(existing_server, key, value) @@ -1658,6 +1660,13 @@ class TestTemporaryMCPSessionEndpoints: assert updated.credentials["upstream_resource"] == "api://typed" + def test_inheritance_carries_oauth_token_header_to_the_session_server(self): + """Dropping it makes the temporary server mint onto Authorization, displacing the static + credential the upstream also requires.""" + updated = self._inherit_with(None, oauth_token_header="x-upstream-oauth") + + assert updated.credentials["oauth_token_header"] == "x-upstream-oauth" + def test_cache_temporary_mcp_server_stores_entry_with_ttl(self): from litellm.proxy.management_endpoints.mcp_management_endpoints import ( _cache_temporary_mcp_server, @@ -2257,6 +2266,7 @@ class TestTemporaryMCPSessionEndpoints: aws_region_name=None, aws_service_name=None, upstream_resource=None, + oauth_token_header=None, ) built_server = generate_mock_mcp_server_config_record(server_id="temp-server") mock_manager = MagicMock()