Yassin Kortam 44a6c659fb fix(mcp): fence an outbound-token write against an overlapping invalidation (#35398) ... get_or_compute single-flights concurrent misses under a per-key lock, but invalidate() deletes outside it. A mint already awaiting the IdP when an invalidation ran wrote its result into the slot afterwards, so a bearer minted before the invalidation was served after it for its full TTL; the upstream-401 retry then re-presented the bearer the server had just rejected. The cache now keeps a per-key generation beside the single-flight lock. invalidate() bumps it and get_or_compute snapshots it inside the lock right before minting, skipping the cache write when it no longer matches. The token is still returned to the caller it was minted for, so only the caching is fenced. Generation and lock share one object that a running mint binds to a local, which pins the weak map's entry for exactly as long as a write can still land; a generation held weakly on its own would be collected across the await and the re-check would silently pass.		2026-09-02 17:45:58 -07:00
..
auth	fix(proxy): word database 503s by whether the fault is transient (#39256)	2026-09-02 15:05:55 -07:00
faults	ci: lint the test tree for undefined names and fix all 30 (#37671)	2026-08-20 13:30:34 -07:00
guardrail_translation	feat(guardrails): scan and mask MCP tool results via post_mcp_call (#35155)	2026-07-30 14:10:26 -07:00
outbound_credentials	fix(mcp): fence an outbound-token write against an overlapping invalidation (#35398)	2026-09-02 17:45:58 -07:00
conftest.py	test: trim mcp fixture docstring and reload comment	2026-09-01 11:06:08 +00:00
test_byok_oauth_endpoints.py	feat(mcp): allow native MCP OAuth support for cursor (#28327)	2026-05-20 15:28:44 -07:00
test_callback_oauth_error_responses.py	Litellm oss staging 250526 (#28770)	2026-05-26 11:57:39 -07:00
test_db_credentials.py	fix(mcp): token refresh and M2M egress honor the admin-entered token URL	2026-08-26 15:31:45 -07:00
test_discoverable_endpoints.py	fix(proxy): word database 503s by whether the fault is transient (#39256)	2026-09-02 15:05:55 -07:00
test_gateway_dcr_flow.py	fix(proxy): word database 503s by whether the fault is transient (#39256)	2026-09-02 15:05:55 -07:00
test_is_tool_name_prefixed.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_jwt_mcp_enforcement.py	fix(mcp): resolve team.access_group_ids → MCP servers (#28997)	2026-05-27 12:36:50 -07:00
test_jwt_mcp_simple.py	fix(mcp): resolve team.access_group_ids → MCP servers (#28997)	2026-05-27 12:36:50 -07:00
test_mcp_block_recording.py	fix(guardrails): record MCP tool guardrail evaluations and blocks in usage monitor	2026-08-14 17:52:36 -04:00
test_mcp_cost_calculator.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_custom_fields.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_debug.py	chore: litellm oss staging (#30968)	2026-06-23 07:31:44 -07:00
test_mcp_discovery.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_elicitation_handler.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_env_vars.py	fix(mcp): drop orphaned per-user credential rows when an MCP server is deleted (#30141)	2026-06-10 15:56:58 -07:00
test_mcp_guardrail_usage_monitor.py	fix(guardrails): record MCP tool guardrail evaluations and blocks in usage monitor	2026-08-14 17:52:36 -04:00
test_mcp_header_alias_utils.py	feat(mcp): Add tool call and tool list support via UI for Oauth mcps (#28454)	2026-05-22 09:04:04 -07:00
test_mcp_hook_extra_headers.py	fix(mcp): keep upstream OAuth Authorization when jwt signer hook injects one on tools/call (#38555)	2026-08-27 12:44:36 -07:00
test_mcp_max_concurrent_requests.py	feat(ui): expose MCP max_concurrent_requests in server create and edit forms (#32397)	2026-07-07 22:47:03 -07:00
test_mcp_metadata_preservation.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_oauth_passthrough.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_oauth_passthrough_cold_start.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_oauth_passthrough_tools.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_partial_update.py	fix(mcp): never write discovery results to the row, heal rows a release already stamped, and retry failed discovery with backoff	2026-07-29 17:51:22 -07:00
test_mcp_sampling_completion_flow.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_model_access.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_model_resolution.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_priority_selection.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_request_builder.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_response_conversion.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_tool_conversion.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_server.py	fix(mcp): gate the connect-time OBO pre-flight on the key's allowed servers (#39447)	2026-09-02 17:39:36 -07:00
test_mcp_server_identity_env.py	test: trim mcp fixture docstring and reload comment	2026-09-01 11:06:08 +00:00
test_mcp_server_manager.py	feat(mcp): let a resolved OAuth token target a custom upstream header (#38456)	2026-08-27 14:32:01 -07:00
test_mcp_session_logging.py	Add MCP semantic conventions to otelv2 (#29468)	2026-06-02 11:45:36 -07:00
test_mcp_sigv4_auth.py	fix(mcp): persist config.yaml DCR clients in a server-scoped store	2026-07-17 19:42:32 -07:00
test_mcp_stale_session.py	ci: lint the test tree for undefined names and fix all 30 (#37671)	2026-08-20 13:30:34 -07:00
test_mcp_tool_search.py	feat(mcp): semantic tool search for the native MCP Gateway (#39404)	2026-09-02 15:09:44 -07:00
test_mcp_toolset_scope.py	fix(mcp): use a toolset row's stored tool name as written	2026-07-24 17:06:08 -07:00
test_oauth2_flow_backfill.py	feat(mcp): startup backfill stamping oauth2_flow on legacy null rows (#32290)	2026-07-06 18:42:08 -07:00
test_oauth2_token_cache.py	feat(mcp): let a resolved OAuth token target a custom upstream header (#38456)	2026-08-27 14:32:01 -07:00
test_oauth_issuer_stamp_backfill.py	fix(mcp): never write discovery results to the row, heal rows a release already stamped, and retry failed discovery with backoff	2026-07-29 17:51:22 -07:00
test_openapi_to_mcp_generator.py	fix(mcp): stop reporting failed OpenAPI tool calls as successes (#37496)	2026-08-19 14:26:02 -07:00
test_openapi_tool_auth.py	feat(mcp): let a resolved OAuth token target a custom upstream header (#38456)	2026-08-27 14:32:01 -07:00
test_proxy_api_credentials.py	fix(proxy): refuse a teamless native-client grant for a user who has teams	2026-08-20 05:37:35 -07:00
test_rest_endpoints.py	Merge branch 'litellm_internal_staging' of https://github.com/BerriAI/litellm into litellm_fix_mcp_oauth_tool_fetch_auth	2026-09-02 14:58:08 -07:00
test_semantic_tool_filter.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_short_mcp_tool_prefix.py	test: require a match= on broad pytest.raises, and drop duplicate parametrize cases (#37769)	2026-08-20 20:24:49 -07:00
test_ui_session_utils.py	fix(mcp): deny the interactive dcr_bridge authorize for a user without server access (#37865)	2026-08-21 12:27:00 -07:00
test_utils.py	fix(mcp): drop caller host and configured upstream headers from logged metadata (#36901)	2026-08-14 17:21:07 -07:00