scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-08 22:21:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 78

refactor(mcp): extract the oauth2 spec dispatch to keep to_server_spec under the complexity ceiling
Some checks failed
LiteLLM Rust / rustfmt, clippy, test (push) Has been cancelled
Details

Browse source 
The ID-JAG landing brought to_server_spec to the C901 boundary and the M2M
branch pushed it one over; the oauth2 sub-mode dispatch now lives in its own
_oauth2_spec helper, mirroring the file's per-mode spec builders
This commit is contained in:
Tin 2026-07-20 12:29:38 -07:00
parent d2342296ae
commit bf04ba8d3e
1 changed files with 19 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
litellm/proxy/_experimental/mcp_server/outbound_credentials/adapter.py
View file

@ -96,16 +96,7 @@ def to_server_spec(server: MCPServer) -> Optional[ServerSpec]:
case MCPAuth.basic:
return _shared_key_spec(server, resource, "Authorization", "Basic", encode=True)
case MCPAuth.oauth2:
if server.has_client_credentials:
return _client_credentials_spec(server, resource)
if server.needs_user_oauth_token and not server.delegate_auth_to_upstream:
return ServerSpec(
server_id=server.server_id,
resource=resource,
config=AuthorizationCodeConfig(),
)
# delegate/passthrough oauth2 stay on v1
return None
return _oauth2_spec(server, resource)
case MCPAuth.oauth2_id_jag:
return _id_jag_spec(server, resource)
case MCPAuth.true_passthrough | MCPAuth.oauth_delegate:
@ -117,6 +108,24 @@ def to_server_spec(server: MCPServer) -> Optional[ServerSpec]:
assert_never(auth_type)
def _oauth2_spec(server: MCPServer, resource: str) -> ServerSpec | None:
"""Dispatch the oauth2 auth_type across its sub-modes: M2M, gateway-managed interactive, or v1.
``client_credentials`` (the explicit ``oauth2_flow`` opt-in) builds the M2M spec, per-user
``authorization_code`` without upstream delegation builds the interactive spec, and the
delegate/passthrough shapes defer to v1 (None).
"""
if server.has_client_credentials:
return _client_credentials_spec(server, resource)
if server.needs_user_oauth_token and not server.delegate_auth_to_upstream:
return ServerSpec(
server_id=server.server_id,
resource=resource,
config=AuthorizationCodeConfig(),
)
return None
def _client_credentials_spec(server: MCPServer, resource: str) -> ServerSpec:
"""Build a client_credentials (M2M) spec; the explicit ``oauth2_flow`` opt-in owns the server.