mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-14 23:21:35 +00:00
8e73ff057f
Adds an admin-configured issuer to MCP servers. When set, OAuth metadata is fetched from the issuer's own origin and adopted only when the document self-attests that same issuer (RFC 8414 §3.3), making token_endpoint, registration_endpoint, and scopes authoritative for the pinned issuer instead of a document the MCP resource server chose. This closes the mix-up where a compromised resource echoes a pinned authorization_url to smuggle its own token endpoint and inflated scopes past the corroboration gate. Discovery is same-authority against the issuer origin, fails closed on a §3.3 mismatch, and does not fall back to resource-rooted discovery. Rows without an issuer keep the existing corroboration-gate behavior unchanged. Backend + schema only; UI field and live-proxy proof follow. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| access_group.py | ||
| base.py | ||
| budget.py | ||
| config.py | ||
| credentials.py | ||
| end_user.py | ||
| managed_files.py | ||
| mcp_server.py | ||
| model.py | ||
| object_permission.py | ||
| organization.py | ||
| organization_membership.py | ||
| project.py | ||
| skills.py | ||
| spend_logs.py | ||
| tag.py | ||
| team.py | ||
| team_membership.py | ||
| user.py | ||
| verification_token.py | ||